Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: quantcast/arrow-java
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: main
Choose a base ref
...
head repository: apache/arrow-java
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: main
Choose a head ref
Checking mergeability… Don’t worry, you can still create the pull request.
  • 17 commits
  • 14 files changed
  • 4 contributors

Commits on Mar 30, 2026

  1. MINOR: Bump io.netty:netty-bom from 4.2.10.Final to 4.2.12.Final (apa…

    …che#1091)
    
    Bumps [io.netty:netty-bom](https://github.com/netty/netty) from
    4.2.10.Final to 4.2.12.Final.
    <details>
    <summary>Release notes</summary>
    <p><em>Sourced from <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/netty/netty/releases">io.netty:netty-bom's">https://github.com/netty/netty/releases">io.netty:netty-bom's
    releases</a>.</em></p>
    <blockquote>
    <h2>netty-4.2.12.Final</h2>
    <h2>What's Changed</h2>
    <ul>
    <li>Revert &quot;Eliminate redundant bounds checks in CompositeByteBuf
    accessors&quot; by <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/chrisvest"><code>@​chrisvest</code></a">https://github.com/chrisvest"><code>@​chrisvest</code></a> in <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/netty/netty/pull/16550">netty/netty#16550</a></li">https://redirect.github.com/netty/netty/pull/16550">netty/netty#16550</a></li>
    </ul>
    <p><strong>Full Changelog</strong>: <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/netty/netty/compare/netty-4.2.11.Final...netty-4.2.12.Final">https://github.com/netty/netty/compare/netty-4.2.11.Final...netty-4.2.12.Final</a></p">https://github.com/netty/netty/compare/netty-4.2.11.Final...netty-4.2.12.Final">https://github.com/netty/netty/compare/netty-4.2.11.Final...netty-4.2.12.Final</a></p>
    <h2>netty-4.2.11.Final</h2>
    <h2>Security</h2>
    <ul>
    <li>CVE-2026-33871, <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/netty/netty/security/advisories/GHSA-w9fj-cfpg-grvv">HTTP/2">https://github.com/netty/netty/security/advisories/GHSA-w9fj-cfpg-grvv">HTTP/2
    CONTINUATION Frame Flood Denial of Service</a></li>
    <li>CVE-2026-33870, <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/netty/netty/security/advisories/GHSA-pwqr-wmgm-9rr8">HTTP">https://github.com/netty/netty/security/advisories/GHSA-pwqr-wmgm-9rr8">HTTP
    Request Smuggling via Chunked Extension Quoted-String Parsing</a></li>
    </ul>
    <h2>What's Changed</h2>
    <ul>
    <li>Update to latest JDK 26 EA release by <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/normanmaurer"><code>@​normanmaurer</code></a">https://github.com/normanmaurer"><code>@​normanmaurer</code></a>
    in <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/netty/netty/pull/16230">netty/netty#16230</a></li">https://redirect.github.com/netty/netty/pull/16230">netty/netty#16230</a></li>
    <li>HTTP3: Allow to support non-standard HTTP3 settings by <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/normanmaurer"><code>@​normanmaurer</code></a">https://github.com/normanmaurer"><code>@​normanmaurer</code></a>
    in <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/netty/netty/pull/16171">netty/netty#16171</a></li">https://redirect.github.com/netty/netty/pull/16171">netty/netty#16171</a></li>
    <li>Fix Incorrect nanos-to-millis conversion in epoll_wait EINTR retry
    loop by <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/adwsingh"><code>@​adwsingh</code></a">https://github.com/adwsingh"><code>@​adwsingh</code></a> in <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/netty/netty/pull/16245">netty/netty#16245</a></li">https://redirect.github.com/netty/netty/pull/16245">netty/netty#16245</a></li>
    <li>Allocate one large segment and slice for each MsgHdrMemory by <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/dreamlike-ocean"><code>@​dreamlike-ocean</code></a">https://github.com/dreamlike-ocean"><code>@​dreamlike-ocean</code></a>
    in <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/netty/netty/pull/16234">netty/netty#16234</a></li">https://redirect.github.com/netty/netty/pull/16234">netty/netty#16234</a></li>
    <li>Make RefCntOpenSslContext.deallocate more robust by <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/chrisvest"><code>@​chrisvest</code></a">https://github.com/chrisvest"><code>@​chrisvest</code></a> in <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/netty/netty/pull/16253">netty/netty#16253</a></li">https://redirect.github.com/netty/netty/pull/16253">netty/netty#16253</a></li>
    <li>Epoll: Fix excessive CPU usage when Channel is only registered but
    no… by <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/normanmaurer"><code>@​normanmaurer</code></a">https://github.com/normanmaurer"><code>@​normanmaurer</code></a>
    in <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/netty/netty/pull/16250">netty/netty#16250</a></li">https://redirect.github.com/netty/netty/pull/16250">netty/netty#16250</a></li>
    <li>Update to gcc for arm 10.3-2021.07 by <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/m1ngyuan"><code>@​m1ngyuan</code></a">https://github.com/m1ngyuan"><code>@​m1ngyuan</code></a> in <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/netty/netty/pull/16255">netty/netty#16255</a></li">https://redirect.github.com/netty/netty/pull/16255">netty/netty#16255</a></li>
    <li>Add acmeIdentifier extension support to pkitesting by <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/chrisvest"><code>@​chrisvest</code></a">https://github.com/chrisvest"><code>@​chrisvest</code></a> in <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/netty/netty/pull/16256">netty/netty#16256</a></li">https://redirect.github.com/netty/netty/pull/16256">netty/netty#16256</a></li>
    <li>Update JDK versions to latest patch releases by <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/m1ngyuan"><code>@​m1ngyuan</code></a">https://github.com/m1ngyuan"><code>@​m1ngyuan</code></a> in <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/netty/netty/pull/16254">netty/netty#16254</a></li">https://redirect.github.com/netty/netty/pull/16254">netty/netty#16254</a></li>
    <li>Avoid allocation in HttpObjectEncoder.addEncodedLengthHex method by
    <a href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/doom369"><code>@​doom369</code></a">https://github.com/doom369"><code>@​doom369</code></a> in <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/netty/netty/pull/16241">netty/netty#16241</a></li">https://redirect.github.com/netty/netty/pull/16241">netty/netty#16241</a></li>
    <li>Automatic backporting workflow from 4.1 to 4.2 by <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/chrisvest"><code>@​chrisvest</code></a">https://github.com/chrisvest"><code>@​chrisvest</code></a> in <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/netty/netty/pull/16269">netty/netty#16269</a></li">https://redirect.github.com/netty/netty/pull/16269">netty/netty#16269</a></li>
    <li>Revert &quot;Automatic backporting workflow from 4.1 to 4.2&quot; by
    <a href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/chrisvest"><code>@​chrisvest</code></a">https://github.com/chrisvest"><code>@​chrisvest</code></a> in
    <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/netty/netty/pull/16270">netty/netty#16270</a></li">https://redirect.github.com/netty/netty/pull/16270">netty/netty#16270</a></li>
    <li>HTTP2: Correctly account for padding when decompress by <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/normanmaurer"><code>@​normanmaurer</code></a">https://github.com/normanmaurer"><code>@​normanmaurer</code></a>
    in <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/netty/netty/pull/16264">netty/netty#16264</a></li">https://redirect.github.com/netty/netty/pull/16264">netty/netty#16264</a></li>
    <li>Automatic backporting workflow from 4.1 to 4.2 by <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/chrisvest"><code>@​chrisvest</code></a">https://github.com/chrisvest"><code>@​chrisvest</code></a> in <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/netty/netty/pull/16271">netty/netty#16271</a></li">https://redirect.github.com/netty/netty/pull/16271">netty/netty#16271</a></li>
    <li>Automatic backporting workflow from 4.1 to 4.2 by <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/chrisvest"><code>@​chrisvest</code></a">https://github.com/chrisvest"><code>@​chrisvest</code></a> in <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/netty/netty/pull/16273">netty/netty#16273</a></li">https://redirect.github.com/netty/netty/pull/16273">netty/netty#16273</a></li>
    <li>Backport PRs must be created with personal access tokens by <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/chrisvest"><code>@​chrisvest</code></a">https://github.com/chrisvest"><code>@​chrisvest</code></a> in <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/netty/netty/pull/16276">netty/netty#16276</a></li">https://redirect.github.com/netty/netty/pull/16276">netty/netty#16276</a></li>
    <li>Expose QuicSslContextBuilder::sni by <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/ZeroErrors"><code>@​ZeroErrors</code></a">https://github.com/ZeroErrors"><code>@​ZeroErrors</code></a> in <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/netty/netty/pull/16178">netty/netty#16178</a></li">https://redirect.github.com/netty/netty/pull/16178">netty/netty#16178</a></li>
    <li>Add more porting workflows by <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/chrisvest"><code>@​chrisvest</code></a">https://github.com/chrisvest"><code>@​chrisvest</code></a> in <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/netty/netty/pull/16275">netty/netty#16275</a></li">https://redirect.github.com/netty/netty/pull/16275">netty/netty#16275</a></li>
    <li>Add more porting workflows by <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/chrisvest"><code>@​chrisvest</code></a">https://github.com/chrisvest"><code>@​chrisvest</code></a> in <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/netty/netty/pull/16283">netty/netty#16283</a></li">https://redirect.github.com/netty/netty/pull/16283">netty/netty#16283</a></li>
    <li>Remove the unpooled allocator from test permutations by <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/chrisvest"><code>@​chrisvest</code></a">https://github.com/chrisvest"><code>@​chrisvest</code></a> in <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/netty/netty/pull/16282">netty/netty#16282</a></li">https://redirect.github.com/netty/netty/pull/16282">netty/netty#16282</a></li>
    <li>Some polishing of the porting workflows by <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/chrisvest"><code>@​chrisvest</code></a">https://github.com/chrisvest"><code>@​chrisvest</code></a> in <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/netty/netty/pull/16288">netty/netty#16288</a></li">https://redirect.github.com/netty/netty/pull/16288">netty/netty#16288</a></li>
    <li>Allow to set destination connection id when creating a client side
    QuicheChannel by <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/normanmaurer"><code>@​normanmaurer</code></a">https://github.com/normanmaurer"><code>@​normanmaurer</code></a>
    in <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/netty/netty/pull/16286">netty/netty#16286</a></li">https://redirect.github.com/netty/netty/pull/16286">netty/netty#16286</a></li>
    <li>Update to latest JDK26 EA build by <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/normanmaurer"><code>@​normanmaurer</code></a">https://github.com/normanmaurer"><code>@​normanmaurer</code></a>
    in <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/netty/netty/pull/16295">netty/netty#16295</a></li">https://redirect.github.com/netty/netty/pull/16295">netty/netty#16295</a></li>
    <li>Add javadoc to clarify responsibility of the user when generating
    the remote connection id by <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/normanmaurer"><code>@​normanmaurer</code></a">https://github.com/normanmaurer"><code>@​normanmaurer</code></a>
    in <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/netty/netty/pull/16293">netty/netty#16293</a></li">https://redirect.github.com/netty/netty/pull/16293">netty/netty#16293</a></li>
    <li>Make the build run faster by <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/chrisvest"><code>@​chrisvest</code></a">https://github.com/chrisvest"><code>@​chrisvest</code></a> in <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/netty/netty/pull/16290">netty/netty#16290</a></li">https://redirect.github.com/netty/netty/pull/16290">netty/netty#16290</a></li>
    <li>Fix IDE warnings in SslHandler by <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/doom369"><code>@​doom369</code></a">https://github.com/doom369"><code>@​doom369</code></a> in <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/netty/netty/pull/16237">netty/netty#16237</a></li">https://redirect.github.com/netty/netty/pull/16237">netty/netty#16237</a></li>
    <li>Decrease Long allocations and map.put calls in
    ReferenceCountedOpenSllEngine in handshake() method by <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/doom369"><code>@​doom369</code></a">https://github.com/doom369"><code>@​doom369</code></a> in <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/netty/netty/pull/16242">netty/netty#16242</a></li">https://redirect.github.com/netty/netty/pull/16242">netty/netty#16242</a></li>
    <li>Support boringssl SSLCredential API by <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/jmcrawford45"><code>@​jmcrawford45</code></a">https://github.com/jmcrawford45"><code>@​jmcrawford45</code></a>
    in <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/netty/netty/pull/15919">netty/netty#15919</a></li">https://redirect.github.com/netty/netty/pull/15919">netty/netty#15919</a></li>
    <li>Fix high-order bit aliasing in HttpUtil.validateToken by <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/furkanvarol"><code>@​furkanvarol</code></a">https://github.com/furkanvarol"><code>@​furkanvarol</code></a> in
    <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/netty/netty/pull/16279">netty/netty#16279</a></li">https://redirect.github.com/netty/netty/pull/16279">netty/netty#16279</a></li>
    <li>Improve multi-byte access performance when UNALIGNED availability is
    unknown by <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/Songdoeon"><code>@​Songdoeon</code></a">https://github.com/Songdoeon"><code>@​Songdoeon</code></a> in <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/netty/netty/pull/16207">netty/netty#16207</a></li">https://redirect.github.com/netty/netty/pull/16207">netty/netty#16207</a></li>
    <li>Avoid unnecessary SSL.getVersion() call and string allocation in
    ReferenceCountedOpenSslEngine by <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/doom369"><code>@​doom369</code></a">https://github.com/doom369"><code>@​doom369</code></a> in <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/netty/netty/pull/16278">netty/netty#16278</a></li">https://redirect.github.com/netty/netty/pull/16278">netty/netty#16278</a></li>
    <li>Support more branch freedom for auto-porting by <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/chrisvest"><code>@​chrisvest</code></a">https://github.com/chrisvest"><code>@​chrisvest</code></a> in <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/netty/netty/pull/16300">netty/netty#16300</a></li">https://redirect.github.com/netty/netty/pull/16300">netty/netty#16300</a></li>
    <li>fix: the precedence of + is higher than &gt;&gt; by <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/cuiweixie"><code>@​cuiweixie</code></a">https://github.com/cuiweixie"><code>@​cuiweixie</code></a> in <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/netty/netty/pull/16312">netty/netty#16312</a></li">https://redirect.github.com/netty/netty/pull/16312">netty/netty#16312</a></li>
    <li>AdaptiveByteBufAllocator: make sure byteBuf.capacity() not greater
    than byteBuf.maxCapacity() by <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/laosijikaichele"><code>@​laosijikaichele</code></a">https://github.com/laosijikaichele"><code>@​laosijikaichele</code></a>
    in <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/netty/netty/pull/16309">netty/netty#16309</a></li">https://redirect.github.com/netty/netty/pull/16309">netty/netty#16309</a></li>
    <li>Fix flaky PooledByteBufAllocatorTest by <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/chrisvest"><code>@​chrisvest</code></a">https://github.com/chrisvest"><code>@​chrisvest</code></a> in <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/netty/netty/pull/16313">netty/netty#16313</a></li">https://redirect.github.com/netty/netty/pull/16313">netty/netty#16313</a></li>
    <li>Fix pooled arena accounting tests by <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/chrisvest"><code>@​chrisvest</code></a">https://github.com/chrisvest"><code>@​chrisvest</code></a> in <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/netty/netty/pull/16321">netty/netty#16321</a></li">https://redirect.github.com/netty/netty/pull/16321">netty/netty#16321</a></li>
    </ul>
    <!-- raw HTML omitted -->
    </blockquote>
    <p>... (truncated)</p>
    </details>
    <details>
    <summary>Commits</summary>
    <ul>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/netty/netty/commit/67ce541e4692853e24fc506466960db35bb64914"><code>67ce541</code></a">https://github.com/netty/netty/commit/67ce541e4692853e24fc506466960db35bb64914"><code>67ce541</code></a>
    [maven-release-plugin] prepare release netty-4.2.12.Final</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/netty/netty/commit/7074624644b79f4e97081bd58a58ed135962b8c2"><code>7074624</code></a">https://github.com/netty/netty/commit/7074624644b79f4e97081bd58a58ed135962b8c2"><code>7074624</code></a>
    Revert &quot;Eliminate redundant bounds checks in CompositeByteBuf
    accessors&quot; (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/netty/netty/issues/16">#16</a>...</li">https://redirect.github.com/netty/netty/issues/16">#16</a>...</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/netty/netty/commit/c3b0a43442dbf84e3eb161d5f252623f832f1579"><code>c3b0a43</code></a">https://github.com/netty/netty/commit/c3b0a43442dbf84e3eb161d5f252623f832f1579"><code>c3b0a43</code></a>
    [maven-release-plugin] prepare for next development iteration</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/netty/netty/commit/c94a8180e749f694fb76963dd494bae17c31aff6"><code>c94a818</code></a">https://github.com/netty/netty/commit/c94a8180e749f694fb76963dd494bae17c31aff6"><code>c94a818</code></a>
    [maven-release-plugin] prepare release netty-4.2.11.Final</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/netty/netty/commit/3b76df185678353733aa21702d6be16130d188a0"><code>3b76df1</code></a">https://github.com/netty/netty/commit/3b76df185678353733aa21702d6be16130d188a0"><code>3b76df1</code></a>
    Merge commit from fork</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/netty/netty/commit/aae944a19eb036993fc47c4b40639476f519deaf"><code>aae944a</code></a">https://github.com/netty/netty/commit/aae944a19eb036993fc47c4b40639476f519deaf"><code>aae944a</code></a>
    Auto-port 4.2: Limit the number of Continuation frames per HTTP2 Headers
    (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/netty/netty/issues/16">#16</a>...</li">https://redirect.github.com/netty/netty/issues/16">#16</a>...</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/netty/netty/commit/60014996491c41d91c26f80bca096610f34fc858"><code>6001499</code></a">https://github.com/netty/netty/commit/60014996491c41d91c26f80bca096610f34fc858"><code>6001499</code></a>
    Eliminate redundant bounds checks in CompositeByteBuf accessors (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/netty/netty/issues/16525">#16525</a>)</li">https://redirect.github.com/netty/netty/issues/16525">#16525</a>)</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/netty/netty/commit/a7fbb6f84625ef29733a1506ed3520e3c21d5247"><code>a7fbb6f</code></a">https://github.com/netty/netty/commit/a7fbb6f84625ef29733a1506ed3520e3c21d5247"><code>a7fbb6f</code></a>
    JdkZlibDecoder: accumulate decompressed output before firing channelRead
    (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/netty/netty/issues/16">#16</a>...</li">https://redirect.github.com/netty/netty/issues/16">#16</a>...</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/netty/netty/commit/7937553d8f49e17b064f57b1414907aed8e3be3d"><code>7937553</code></a">https://github.com/netty/netty/commit/7937553d8f49e17b064f57b1414907aed8e3be3d"><code>7937553</code></a>
    Enforce io.netty.maxDirectMemory accounting on all Java versions (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/netty/netty/issues/16489">#16489</a>)</li">https://redirect.github.com/netty/netty/issues/16489">#16489</a>)</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/netty/netty/commit/893ea2ea6c35c9e1812e5d331530b88d8690022b"><code>893ea2e</code></a">https://github.com/netty/netty/commit/893ea2ea6c35c9e1812e5d331530b88d8690022b"><code>893ea2e</code></a>
    Allocate less in QueryStringDecoder.addParam for typical use case (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/netty/netty/issues/16527">#16527</a>)</li">https://redirect.github.com/netty/netty/issues/16527">#16527</a>)</li>
    <li>Additional commits viewable in <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/netty/netty/compare/netty-4.2.10.Final...netty-4.2.12.Final">compare">https://github.com/netty/netty/compare/netty-4.2.10.Final...netty-4.2.12.Final">compare
    view</a></li>
    </ul>
    </details>
    <br />
    
    
    [![Dependabot compatibility
    score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=io.netty:netty-bom&package-manager=maven&previous-version=4.2.10.Final&new-version=4.2.12.Final)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
    
    Dependabot will resolve any conflicts with this PR as long as you don't
    alter it yourself. You can also trigger a rebase manually by commenting
    `@dependabot rebase`.
    
    [//]: # (dependabot-automerge-start)
    [//]: # (dependabot-automerge-end)
    
    ---
    
    <details>
    <summary>Dependabot commands and options</summary>
    <br />
    
    You can trigger Dependabot actions by commenting on this PR:
    - `@dependabot rebase` will rebase this PR
    - `@dependabot recreate` will recreate this PR, overwriting any edits
    that have been made to it
    - `@dependabot show <dependency name> ignore conditions` will show all
    of the ignore conditions of the specified dependency
    - `@dependabot ignore this major version` will close this PR and stop
    Dependabot creating any more for this major version (unless you reopen
    the PR or upgrade to it yourself)
    - `@dependabot ignore this minor version` will close this PR and stop
    Dependabot creating any more for this minor version (unless you reopen
    the PR or upgrade to it yourself)
    - `@dependabot ignore this dependency` will close this PR and stop
    Dependabot creating any more for this dependency (unless you reopen the
    PR or upgrade to it yourself)
    
    
    </details>
    
    Signed-off-by: dependabot[bot] <support@github.com>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] authored Mar 30, 2026
    Configuration menu
    Copy the full SHA
    168a969 View commit details
    Browse the repository at this point in the history
  2. MINOR: Bump com.nimbusds:oauth2-oidc-sdk from 11.34 to 11.37 (apache#…

    …1096)
    
    Bumps
    [com.nimbusds:oauth2-oidc-sdk](https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions)
    from 11.34 to 11.37.
    <details>
    <summary>Changelog</summary>
    <p><em>Sourced from <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/src/master/CHANGELOG.txt">com.nimbusds:oauth2-oidc-sdk's" rel="nofollow">https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/src/master/CHANGELOG.txt">com.nimbusds:oauth2-oidc-sdk's
    changelog</a>.</em></p>
    <blockquote>
    <p>version 1.0 (2012-05-29)
    * First official release with authorisation endpoint, token endpoint,
    check
    ID endpoint and UserInfo endpoint support.
    * JSON Web Tokens (JWTs) support through the Nimbus-JWT library.
    * Language Tags (RFC 5646) support through the Nimbus-LangTag library.
    * JSON support through the JSON Smart library.</p>
    <p>version 2.0 (2013-05-13)
    * Intermediary development release with Maven build, published to
    Maven Central.</p>
    <p>version 2.1 (2013-06-06)
    * Updates the APIs to OpenID Connect Messages draft 20, OpenID Connect
    Standard draft 21, OpenID Connect Discovery draft 17 and OpenID
    Connect Registration draft 19.
    * Major refactoring of the APIs for greater simplicity.
    * Adds JUnit tests.</p>
    <p>version 2.2 (2013-06-18)
    * Refactors dynamic OpenID Connect client registration.
    * Adds partial support of the OAuth 2.0 Dynamic Client Registration
    Protocol (draft-ietf-oauth-dyn-reg-12).
    * Optimises parsing of request parameters consisting of one or more
    tokens (scope, response type, etc).</p>
    <p>version 2.3 (2013-06-19)
    * Renames OAuth 2.0 dynamic client registration package.
    * Adds ClientInformation.getClientMetadata() method.
    * Adds OIDCClientInformation class.</p>
    <p>version 2.4 (2013-06-20)
    * Adds static OIDCClientInformation.parse(JSONObject) method.</p>
    <p>version 2.5 (2013-06-22)
    * Adds support OAuth 2.0 dynamic client update.
    * Adds OpenID Connect dynamic client registration classes.</p>
    <p>version 2.6 (2013-06-25)
    * Enforces order of preference of ACR values in OpenID Connect client
    metadata, as required by the specification.
    * Documentation and performance improvements.</p>
    <p>version 2.7 (2013-06-26)
    * Switches Identifier generation to java.security.SecureRandom.</p>
    <p>version 2.8 (2013-06-30)
    * Fixes serialisation and assignment bugs in ClientMetadata.
    * Switches Secret generation to java.security.SecureRandom.</p>
    <p>version 2.9 (2013-09-17)</p>
    <!-- raw HTML omitted -->
    </blockquote>
    <p>... (truncated)</p>
    </details>
    <details>
    <summary>Commits</summary>
    <ul>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/commits/d98de1ab39f699e39903967775abc242fc064e78"><code>d98de1a</code></a" rel="nofollow">https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/commits/d98de1ab39f699e39903967775abc242fc064e78"><code>d98de1a</code></a>
    [maven-release-plugin] prepare for next development iteration</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/commits/2ea716f29401515a656c73bef9d66d5860270b2f"><code>2ea716f</code></a" rel="nofollow">https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/commits/2ea716f29401515a656c73bef9d66d5860270b2f"><code>2ea716f</code></a>
    Shortens InvalidClientException messages</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/commits/ed5773c5a3383a4c5af5f8484aad2864dc1b79c6"><code>ed5773c</code></a" rel="nofollow">https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/commits/ed5773c5a3383a4c5af5f8484aad2864dc1b79c6"><code>ed5773c</code></a>
    TokenRevocationRequest receives custom form parameters support</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/commits/e133559f00d1469a5da284cfdbb30d4d0102e3be"><code>e133559</code></a" rel="nofollow">https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/commits/e133559f00d1469a5da284cfdbb30d4d0102e3be"><code>e133559</code></a>
    Updates tests for shortened InvalidClientException messages</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/commits/fe43e1f129febee53c0a15178b08b6e835bcd460"><code>fe43e1f</code></a" rel="nofollow">https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/commits/fe43e1f129febee53c0a15178b08b6e835bcd460"><code>fe43e1f</code></a>
    [maven-release-plugin] prepare release 11.35</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/commits/73224c9422c0ebb3c1a3b5387aac2d529d8bef5b"><code>73224c9</code></a" rel="nofollow">https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/commits/73224c9422c0ebb3c1a3b5387aac2d529d8bef5b"><code>73224c9</code></a>
    [maven-release-plugin] prepare for next development iteration</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/commits/f3f728613feb023640801faf33873d55f6c2ec98"><code>f3f7286</code></a" rel="nofollow">https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/commits/f3f728613feb023640801faf33873d55f6c2ec98"><code>f3f7286</code></a>
    Adds static JSONObjectUtils.getNonNegativeLong methods</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/commits/d6899e0554d630956dd09e3d2ba1236ee66d2bd6"><code>d6899e0</code></a" rel="nofollow">https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/commits/d6899e0554d630956dd09e3d2ba1236ee66d2bd6"><code>d6899e0</code></a>
    Cleans up JSONObjectUtils.getEnum(net.minidev.json.JSONObject,
    java.lang.Stri...</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/commits/9b05d23a876550842e75c1abff08795ac825b9a0"><code>9b05d23</code></a" rel="nofollow">https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/commits/9b05d23a876550842e75c1abff08795ac825b9a0"><code>9b05d23</code></a>
    Adds non-negative checks when parsing Date instances from Unix
    timestamps (is...</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/commits/592d8f4e82e7815966258c114b66834b9b4c9e6c"><code>592d8f4</code></a" rel="nofollow">https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/commits/592d8f4e82e7815966258c114b66834b9b4c9e6c"><code>592d8f4</code></a>
    Adds &quot;acr&quot; and &quot;auth_time&quot; parameter (RFC 9470)
    support to TokenIntrospection...</li>
    <li>Additional commits viewable in <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/branches/compare/11.37..11.34">compare" rel="nofollow">https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/branches/compare/11.37..11.34">compare
    view</a></li>
    </ul>
    </details>
    <br />
    
    
    [![Dependabot compatibility
    score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=com.nimbusds:oauth2-oidc-sdk&package-manager=maven&previous-version=11.34&new-version=11.37)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
    
    Dependabot will resolve any conflicts with this PR as long as you don't
    alter it yourself. You can also trigger a rebase manually by commenting
    `@dependabot rebase`.
    
    [//]: # (dependabot-automerge-start)
    [//]: # (dependabot-automerge-end)
    
    ---
    
    <details>
    <summary>Dependabot commands and options</summary>
    <br />
    
    You can trigger Dependabot actions by commenting on this PR:
    - `@dependabot rebase` will rebase this PR
    - `@dependabot recreate` will recreate this PR, overwriting any edits
    that have been made to it
    - `@dependabot show <dependency name> ignore conditions` will show all
    of the ignore conditions of the specified dependency
    - `@dependabot ignore this major version` will close this PR and stop
    Dependabot creating any more for this major version (unless you reopen
    the PR or upgrade to it yourself)
    - `@dependabot ignore this minor version` will close this PR and stop
    Dependabot creating any more for this minor version (unless you reopen
    the PR or upgrade to it yourself)
    - `@dependabot ignore this dependency` will close this PR and stop
    Dependabot creating any more for this dependency (unless you reopen the
    PR or upgrade to it yourself)
    
    
    </details>
    
    Signed-off-by: dependabot[bot] <support@github.com>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] authored Mar 30, 2026
    Configuration menu
    Copy the full SHA
    89fa995 View commit details
    Browse the repository at this point in the history
  3. MINOR: Bump com.gradle:develocity-maven-extension from 2.3.4 to 2.4.0 (

    …apache#1095)
    
    Bumps com.gradle:develocity-maven-extension from 2.3.4 to 2.4.0.
    
    
    [![Dependabot compatibility
    score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=com.gradle:develocity-maven-extension&package-manager=maven&previous-version=2.3.4&new-version=2.4.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
    
    Dependabot will resolve any conflicts with this PR as long as you don't
    alter it yourself. You can also trigger a rebase manually by commenting
    `@dependabot rebase`.
    
    [//]: # (dependabot-automerge-start)
    [//]: # (dependabot-automerge-end)
    
    ---
    
    <details>
    <summary>Dependabot commands and options</summary>
    <br />
    
    You can trigger Dependabot actions by commenting on this PR:
    - `@dependabot rebase` will rebase this PR
    - `@dependabot recreate` will recreate this PR, overwriting any edits
    that have been made to it
    - `@dependabot show <dependency name> ignore conditions` will show all
    of the ignore conditions of the specified dependency
    - `@dependabot ignore this major version` will close this PR and stop
    Dependabot creating any more for this major version (unless you reopen
    the PR or upgrade to it yourself)
    - `@dependabot ignore this minor version` will close this PR and stop
    Dependabot creating any more for this minor version (unless you reopen
    the PR or upgrade to it yourself)
    - `@dependabot ignore this dependency` will close this PR and stop
    Dependabot creating any more for this dependency (unless you reopen the
    PR or upgrade to it yourself)
    
    
    </details>
    
    Signed-off-by: dependabot[bot] <support@github.com>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] authored Mar 30, 2026
    Configuration menu
    Copy the full SHA
    4297733 View commit details
    Browse the repository at this point in the history
  4. MINOR: Bump com.google.api.grpc:proto-google-common-protos from 2.66.…

    …0 to 2.67.0 (apache#1092)
    
    Bumps
    [com.google.api.grpc:proto-google-common-protos](https://github.com/googleapis/sdk-platform-java)
    from 2.66.0 to 2.67.0.
    <details>
    <summary>Release notes</summary>
    <p><em>Sourced from <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/googleapis/sdk-platform-java/releases">com.google.api.grpc:proto-google-common-protos's">https://github.com/googleapis/sdk-platform-java/releases">com.google.api.grpc:proto-google-common-protos's
    releases</a>.</em></p>
    <blockquote>
    <h2>v2.67.0</h2>
    <h2><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/googleapis/sdk-platform-java/compare/v2.66.1...v2.67.0">2.67.0</a">https://github.com/googleapis/sdk-platform-java/compare/v2.66.1...v2.67.0">2.67.0</a>
    (2026-02-18)</h2>
    <h3>Features</h3>
    <ul>
    <li><strong>observability:</strong> introduce minimal tracing
    implementation (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/googleapis/sdk-platform-java/issues/4105">#4105</a">https://redirect.github.com/googleapis/sdk-platform-java/issues/4105">#4105</a>)
    (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/googleapis/sdk-platform-java/commit/e4e5e893e7a62bd12528e7d448dc2789f71946eb">e4e5e89</a>)</li">https://github.com/googleapis/sdk-platform-java/commit/e4e5e893e7a62bd12528e7d448dc2789f71946eb">e4e5e89</a>)</li>
    </ul>
    <h3>Dependencies</h3>
    <ul>
    <li>Upgrade Google-Auth-Library to v1.43.0 (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/googleapis/sdk-platform-java/issues/4114">#4114</a">https://redirect.github.com/googleapis/sdk-platform-java/issues/4114">#4114</a>)
    (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/googleapis/sdk-platform-java/commit/825298b6bf225bb8536ecab9d788f82f3f8eec4d">825298b</a>)</li">https://github.com/googleapis/sdk-platform-java/commit/825298b6bf225bb8536ecab9d788f82f3f8eec4d">825298b</a>)</li>
    <li>Upgrade grpc to 1.76.3 (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/googleapis/sdk-platform-java/issues/4106">#4106</a">https://redirect.github.com/googleapis/sdk-platform-java/issues/4106">#4106</a>)
    (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/googleapis/sdk-platform-java/commit/c6555f5f0cd85683db76394271e1f57989cac7d0">c6555f5</a>)</li">https://github.com/googleapis/sdk-platform-java/commit/c6555f5f0cd85683db76394271e1f57989cac7d0">c6555f5</a>)</li>
    </ul>
    <h2>v2.66.1</h2>
    <h2><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/googleapis/sdk-platform-java/compare/v2.66.0...v2.66.1">2.66.1</a">https://github.com/googleapis/sdk-platform-java/compare/v2.66.0...v2.66.1">2.66.1</a>
    (2026-02-04)</h2>
    <h3>Documentation</h3>
    <ul>
    <li>[common-protos] update reference documentation for
    <code>SelectionInput.DROPDOWN</code> to include dynamic data sources and
    autosuggestion (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/googleapis/sdk-platform-java/commit/9960262cf248400836c04063e6a701bec2aca1ba">9960262</a>)</li">https://github.com/googleapis/sdk-platform-java/commit/9960262cf248400836c04063e6a701bec2aca1ba">9960262</a>)</li>
    </ul>
    </blockquote>
    </details>
    <details>
    <summary>Changelog</summary>
    <p><em>Sourced from <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/googleapis/sdk-platform-java/blob/main/CHANGELOG.md">com.google.api.grpc:proto-google-common-protos's">https://github.com/googleapis/sdk-platform-java/blob/main/CHANGELOG.md">com.google.api.grpc:proto-google-common-protos's
    changelog</a>.</em></p>
    <blockquote>
    <h2><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/googleapis/sdk-platform-java/compare/v2.66.1...v2.67.0">2.67.0</a">https://github.com/googleapis/sdk-platform-java/compare/v2.66.1...v2.67.0">2.67.0</a>
    (2026-02-18)</h2>
    <h3>Features</h3>
    <ul>
    <li><strong>observability:</strong> introduce minimal tracing
    implementation (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/googleapis/sdk-platform-java/issues/4105">#4105</a">https://redirect.github.com/googleapis/sdk-platform-java/issues/4105">#4105</a>)
    (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/googleapis/sdk-platform-java/commit/e4e5e893e7a62bd12528e7d448dc2789f71946eb">e4e5e89</a>)</li">https://github.com/googleapis/sdk-platform-java/commit/e4e5e893e7a62bd12528e7d448dc2789f71946eb">e4e5e89</a>)</li>
    </ul>
    <h3>Dependencies</h3>
    <ul>
    <li>Upgrade Google-Auth-Library to v1.43.0 (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/googleapis/sdk-platform-java/issues/4114">#4114</a">https://redirect.github.com/googleapis/sdk-platform-java/issues/4114">#4114</a>)
    (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/googleapis/sdk-platform-java/commit/825298b6bf225bb8536ecab9d788f82f3f8eec4d">825298b</a>)</li">https://github.com/googleapis/sdk-platform-java/commit/825298b6bf225bb8536ecab9d788f82f3f8eec4d">825298b</a>)</li>
    <li>Upgrade grpc to 1.76.3 (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/googleapis/sdk-platform-java/issues/4106">#4106</a">https://redirect.github.com/googleapis/sdk-platform-java/issues/4106">#4106</a>)
    (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/googleapis/sdk-platform-java/commit/c6555f5f0cd85683db76394271e1f57989cac7d0">c6555f5</a>)</li">https://github.com/googleapis/sdk-platform-java/commit/c6555f5f0cd85683db76394271e1f57989cac7d0">c6555f5</a>)</li>
    </ul>
    <h2><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/googleapis/sdk-platform-java/compare/v2.66.0...v2.66.1">2.66.1</a">https://github.com/googleapis/sdk-platform-java/compare/v2.66.0...v2.66.1">2.66.1</a>
    (2026-02-04)</h2>
    <h3>Documentation</h3>
    <ul>
    <li>[common-protos] update reference documentation for
    <code>SelectionInput.DROPDOWN</code> to include dynamic data sources and
    autosuggestion (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/googleapis/sdk-platform-java/commit/9960262cf248400836c04063e6a701bec2aca1ba">9960262</a>)</li">https://github.com/googleapis/sdk-platform-java/commit/9960262cf248400836c04063e6a701bec2aca1ba">9960262</a>)</li>
    </ul>
    </blockquote>
    </details>
    <details>
    <summary>Commits</summary>
    <ul>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/googleapis/sdk-platform-java/commit/50d2af33e055075693b8ee14cc8a2da107320144"><code>50d2af3</code></a">https://github.com/googleapis/sdk-platform-java/commit/50d2af33e055075693b8ee14cc8a2da107320144"><code>50d2af3</code></a>
    chore(main): release 2.67.0 (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/googleapis/sdk-platform-java/issues/4107">#4107</a>)</li">https://redirect.github.com/googleapis/sdk-platform-java/issues/4107">#4107</a>)</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/googleapis/sdk-platform-java/commit/ffb6b02f9711d247204fce57d98d5f0fb974bf39"><code>ffb6b02</code></a">https://github.com/googleapis/sdk-platform-java/commit/ffb6b02f9711d247204fce57d98d5f0fb974bf39"><code>ffb6b02</code></a>
    chore(deps): update upper bound dependencies file (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/googleapis/sdk-platform-java/issues/4112">#4112</a>)</li">https://redirect.github.com/googleapis/sdk-platform-java/issues/4112">#4112</a>)</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/googleapis/sdk-platform-java/commit/825298b6bf225bb8536ecab9d788f82f3f8eec4d"><code>825298b</code></a">https://github.com/googleapis/sdk-platform-java/commit/825298b6bf225bb8536ecab9d788f82f3f8eec4d"><code>825298b</code></a>
    deps: Upgrade Google-Auth-Library to v1.43.0 (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/googleapis/sdk-platform-java/issues/4114">#4114</a>)</li">https://redirect.github.com/googleapis/sdk-platform-java/issues/4114">#4114</a>)</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/googleapis/sdk-platform-java/commit/3fa1ca3ffa0e4d103e2812bd5c29547b7e4d6410"><code>3fa1ca3</code></a">https://github.com/googleapis/sdk-platform-java/commit/3fa1ca3ffa0e4d103e2812bd5c29547b7e4d6410"><code>3fa1ca3</code></a>
    chore: update googleapis commit at Thu Feb 5 03:00:22 UTC 2026 (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/googleapis/sdk-platform-java/issues/4104">#4104</a>)</li">https://redirect.github.com/googleapis/sdk-platform-java/issues/4104">#4104</a>)</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/googleapis/sdk-platform-java/commit/e4e5e893e7a62bd12528e7d448dc2789f71946eb"><code>e4e5e89</code></a">https://github.com/googleapis/sdk-platform-java/commit/e4e5e893e7a62bd12528e7d448dc2789f71946eb"><code>e4e5e89</code></a>
    feat(observability): introduce minimal tracing implementation (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/googleapis/sdk-platform-java/issues/4105">#4105</a>)</li">https://redirect.github.com/googleapis/sdk-platform-java/issues/4105">#4105</a>)</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/googleapis/sdk-platform-java/commit/c6555f5f0cd85683db76394271e1f57989cac7d0"><code>c6555f5</code></a">https://github.com/googleapis/sdk-platform-java/commit/c6555f5f0cd85683db76394271e1f57989cac7d0"><code>c6555f5</code></a>
    deps: Upgrade grpc to 1.76.3 (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/googleapis/sdk-platform-java/issues/4106">#4106</a>)</li">https://redirect.github.com/googleapis/sdk-platform-java/issues/4106">#4106</a>)</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/googleapis/sdk-platform-java/commit/117c390d24a734aafb0f994ded30a054c6eed901"><code>117c390</code></a">https://github.com/googleapis/sdk-platform-java/commit/117c390d24a734aafb0f994ded30a054c6eed901"><code>117c390</code></a>
    chore(main): release 2.66.2-SNAPSHOT (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/googleapis/sdk-platform-java/issues/4102">#4102</a>)</li">https://redirect.github.com/googleapis/sdk-platform-java/issues/4102">#4102</a>)</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/googleapis/sdk-platform-java/commit/ff33367579969c7ce65dd84a505f8d91b8ba67fd"><code>ff33367</code></a">https://github.com/googleapis/sdk-platform-java/commit/ff33367579969c7ce65dd84a505f8d91b8ba67fd"><code>ff33367</code></a>
    tests: Upgrade logback to 1.5.25 in tests (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/googleapis/sdk-platform-java/issues/4103">#4103</a>)</li">https://redirect.github.com/googleapis/sdk-platform-java/issues/4103">#4103</a>)</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/googleapis/sdk-platform-java/commit/a4d8c44b60f3285244afbff7ef2cbfe032947688"><code>a4d8c44</code></a">https://github.com/googleapis/sdk-platform-java/commit/a4d8c44b60f3285244afbff7ef2cbfe032947688"><code>a4d8c44</code></a>
    tests: Remove 3.25.8 from protobuf compatibility testing (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/googleapis/sdk-platform-java/issues/4101">#4101</a>)</li">https://redirect.github.com/googleapis/sdk-platform-java/issues/4101">#4101</a>)</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/googleapis/sdk-platform-java/commit/3b280a3d65bc45368536e715a4fa6c04ddbfff66"><code>3b280a3</code></a">https://github.com/googleapis/sdk-platform-java/commit/3b280a3d65bc45368536e715a4fa6c04ddbfff66"><code>3b280a3</code></a>
    chore(main): release 2.66.1 (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/googleapis/sdk-platform-java/issues/4100">#4100</a>)</li">https://redirect.github.com/googleapis/sdk-platform-java/issues/4100">#4100</a>)</li>
    <li>Additional commits viewable in <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/googleapis/sdk-platform-java/compare/v2.66.0...v2.67.0">compare">https://github.com/googleapis/sdk-platform-java/compare/v2.66.0...v2.67.0">compare
    view</a></li>
    </ul>
    </details>
    <br />
    
    
    [![Dependabot compatibility
    score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=com.google.api.grpc:proto-google-common-protos&package-manager=maven&previous-version=2.66.0&new-version=2.67.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
    
    Dependabot will resolve any conflicts with this PR as long as you don't
    alter it yourself. You can also trigger a rebase manually by commenting
    `@dependabot rebase`.
    
    [//]: # (dependabot-automerge-start)
    [//]: # (dependabot-automerge-end)
    
    ---
    
    <details>
    <summary>Dependabot commands and options</summary>
    <br />
    
    You can trigger Dependabot actions by commenting on this PR:
    - `@dependabot rebase` will rebase this PR
    - `@dependabot recreate` will recreate this PR, overwriting any edits
    that have been made to it
    - `@dependabot show <dependency name> ignore conditions` will show all
    of the ignore conditions of the specified dependency
    - `@dependabot ignore this major version` will close this PR and stop
    Dependabot creating any more for this major version (unless you reopen
    the PR or upgrade to it yourself)
    - `@dependabot ignore this minor version` will close this PR and stop
    Dependabot creating any more for this minor version (unless you reopen
    the PR or upgrade to it yourself)
    - `@dependabot ignore this dependency` will close this PR and stop
    Dependabot creating any more for this dependency (unless you reopen the
    PR or upgrade to it yourself)
    
    
    </details>
    
    Signed-off-by: dependabot[bot] <support@github.com>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] authored Mar 30, 2026
    Configuration menu
    Copy the full SHA
    447372c View commit details
    Browse the repository at this point in the history
  5. MINOR: Bump org.apache:apache from 33 to 37 (apache#1033)

    Bumps [org.apache:apache](https://github.com/apache/maven-apache-parent)
    from 33 to 37.
    <details>
    <summary>Release notes</summary>
    <p><em>Sourced from <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/apache/maven-apache-parent/releases">org.apache:apache's">https://github.com/apache/maven-apache-parent/releases">org.apache:apache's
    releases</a>.</em></p>
    <blockquote>
    <h2>Apache Parent POM version 37</h2>
    <!-- raw HTML omitted -->
    <h2>🚀 New features and improvements</h2>
    <ul>
    <li>Disable parallel PUT on release (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/apache/maven-apache-parent/pull/566">#566</a">https://redirect.github.com/apache/maven-apache-parent/pull/566">#566</a>)
    <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/slawekjaranowski"><code>@​slawekjaranowski</code></a></li">https://github.com/slawekjaranowski"><code>@​slawekjaranowski</code></a></li>
    </ul>
    <h2>Apache Parent POM version 36</h2>
    <!-- raw HTML omitted -->
    <h2>:boom: Breaking changes</h2>
    <ul>
    <li>Update minimum maven version to match current stable version (3.6.3
    -&gt; 3.9) (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/apache/maven-apache-parent/pull/533">#533</a">https://redirect.github.com/apache/maven-apache-parent/pull/533">#533</a>)
    <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/DomGarguilo"><code>@​DomGarguilo</code></a></li">https://github.com/DomGarguilo"><code>@​DomGarguilo</code></a></li>
    <li>Introduce javaVersion property for maven.compiler.* configuration
    (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/apache/maven-apache-parent/pull/551">#551</a">https://redirect.github.com/apache/maven-apache-parent/pull/551">#551</a>)
    <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/slawekjaranowski"><code>@​slawekjaranowski</code></a></li">https://github.com/slawekjaranowski"><code>@​slawekjaranowski</code></a></li>
    <li>Switch JDK &gt;= 9 to only use maven.compiler.release (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/apache/maven-apache-parent/pull/543">#543</a">https://redirect.github.com/apache/maven-apache-parent/pull/543">#543</a>)
    <a href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/gnodet"><code>@​gnodet</code></a></li">https://github.com/gnodet"><code>@​gnodet</code></a></li>
    </ul>
    <h2>🚀 New features and improvements</h2>
    <ul>
    <li>Update minimum maven version to match current stable version (3.6.3
    -&gt; 3.9) (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/apache/maven-apache-parent/pull/533">#533</a">https://redirect.github.com/apache/maven-apache-parent/pull/533">#533</a>)
    <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/DomGarguilo"><code>@​DomGarguilo</code></a></li">https://github.com/DomGarguilo"><code>@​DomGarguilo</code></a></li>
    <li>Introduce javaVersion property for maven.compiler.* configuration
    (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/apache/maven-apache-parent/pull/551">#551</a">https://redirect.github.com/apache/maven-apache-parent/pull/551">#551</a>)
    <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/slawekjaranowski"><code>@​slawekjaranowski</code></a></li">https://github.com/slawekjaranowski"><code>@​slawekjaranowski</code></a></li>
    <li>Switch JDK &gt;= 9 to only use maven.compiler.release (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/apache/maven-apache-parent/pull/543">#543</a">https://redirect.github.com/apache/maven-apache-parent/pull/543">#543</a>)
    <a href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/gnodet"><code>@​gnodet</code></a></li">https://github.com/gnodet"><code>@​gnodet</code></a></li>
    <li>Add default specification and implementation for javadoc and source
    manifest entries (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/apache/maven-apache-parent/pull/548">#548</a">https://redirect.github.com/apache/maven-apache-parent/pull/548">#548</a>)
    <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/slawekjaranowski"><code>@​slawekjaranowski</code></a></li">https://github.com/slawekjaranowski"><code>@​slawekjaranowski</code></a></li>
    </ul>
    <h2>📝 Documentation updates</h2>
    <ul>
    <li>Clarify how to use Apache Snapshot repository (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/apache/maven-apache-parent/pull/558">#558</a">https://redirect.github.com/apache/maven-apache-parent/pull/558">#558</a>)
    <a href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/kwin"><code>@​kwin</code></a></li">https://github.com/kwin"><code>@​kwin</code></a></li>
    <li>activate Fluido skin's anchorJs (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/apache/maven-apache-parent/pull/553">#553</a">https://redirect.github.com/apache/maven-apache-parent/pull/553">#553</a>)
    <a href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/hboutemy"><code>@​hboutemy</code></a></li">https://github.com/hboutemy"><code>@​hboutemy</code></a></li>
    </ul>
    <h2>👻 Maintenance</h2>
    <ul>
    <li>Avoid - WARNING: Use of the three-letter time zone ID ... on JDK 25
    for RAT plugin (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/apache/maven-apache-parent/pull/562">#562</a">https://redirect.github.com/apache/maven-apache-parent/pull/562">#562</a>)
    <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/slawekjaranowski"><code>@​slawekjaranowski</code></a></li">https://github.com/slawekjaranowski"><code>@​slawekjaranowski</code></a></li>
    <li>feat: enable prevent branch protection rules (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/apache/maven-apache-parent/pull/535">#535</a">https://redirect.github.com/apache/maven-apache-parent/pull/535">#535</a>)
    <a href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/sebtiem"><code>@​sebtiem</code></a></li">https://github.com/sebtiem"><code>@​sebtiem</code></a></li>
    </ul>
    <h2>📦 Dependency updates</h2>
    <ul>
    <li>Bump org.apache.maven.plugins:maven-release-plugin from 3.3.0 to
    3.3.1 (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/apache/maven-apache-parent/pull/565">#565</a">https://redirect.github.com/apache/maven-apache-parent/pull/565">#565</a>)
    @<a href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/apps/dependabot">dependabot[bot]</a></li">https://github.com/apps/dependabot">dependabot[bot]</a></li>
    <li>Bump org.apache.maven.plugins:maven-release-plugin from 3.2.0 to
    3.3.0 (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/apache/maven-apache-parent/pull/559">#559</a">https://redirect.github.com/apache/maven-apache-parent/pull/559">#559</a>)
    @<a href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/apps/dependabot">dependabot[bot]</a></li">https://github.com/apps/dependabot">dependabot[bot]</a></li>
    <li>Bump org.apache.maven.plugins:maven-source-plugin from 3.3.1 to
    3.4.0 (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/apache/maven-apache-parent/pull/557">#557</a">https://redirect.github.com/apache/maven-apache-parent/pull/557">#557</a>)
    @<a href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/apps/dependabot">dependabot[bot]</a></li">https://github.com/apps/dependabot">dependabot[bot]</a></li>
    <li>Bump org.apache.maven.plugins:maven-assembly-plugin from 3.7.1 to
    3.8.0 (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/apache/maven-apache-parent/pull/556">#556</a">https://redirect.github.com/apache/maven-apache-parent/pull/556">#556</a>)
    @<a href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/apps/dependabot">dependabot[bot]</a></li">https://github.com/apps/dependabot">dependabot[bot]</a></li>
    <li>Bump org.apache.maven.plugins:maven-war-plugin from 3.5.0 to 3.5.1
    (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/apache/maven-apache-parent/pull/555">#555</a">https://redirect.github.com/apache/maven-apache-parent/pull/555">#555</a>)
    @<a href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/apps/dependabot">dependabot[bot]</a></li">https://github.com/apps/dependabot">dependabot[bot]</a></li>
    <li>Bump org.apache.maven.plugins:maven-resources-plugin from 3.3.1 to
    3.4.0 (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/apache/maven-apache-parent/pull/554">#554</a">https://redirect.github.com/apache/maven-apache-parent/pull/554">#554</a>)
    @<a href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/apps/dependabot">dependabot[bot]</a></li">https://github.com/apps/dependabot">dependabot[bot]</a></li>
    <li>Bump org.apache.maven.plugins:maven-jar-plugin from 3.4.2 to 3.5.0
    (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/apache/maven-apache-parent/pull/552">#552</a">https://redirect.github.com/apache/maven-apache-parent/pull/552">#552</a>)
    @<a href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/apps/dependabot">dependabot[bot]</a></li">https://github.com/apps/dependabot">dependabot[bot]</a></li>
    <li>Upgrade maven-release-plugin to version 3.2.0 (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/apache/maven-apache-parent/pull/549">#549</a">https://redirect.github.com/apache/maven-apache-parent/pull/549">#549</a>)
    <a href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/kwin"><code>@​kwin</code></a></li">https://github.com/kwin"><code>@​kwin</code></a></li>
    <li>Bump org.apache.maven.plugins:maven-dependency-plugin from 3.8.1 to
    3.9.0 (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/apache/maven-apache-parent/pull/542">#542</a">https://redirect.github.com/apache/maven-apache-parent/pull/542">#542</a>)
    @<a href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/apps/dependabot">dependabot[bot]</a></li">https://github.com/apps/dependabot">dependabot[bot]</a></li>
    <li>Bump org.apache.maven.plugins:maven-war-plugin from 3.4.0 to 3.5.0
    (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/apache/maven-apache-parent/pull/546">#546</a">https://redirect.github.com/apache/maven-apache-parent/pull/546">#546</a>)
    @<a href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/apps/dependabot">dependabot[bot]</a></li">https://github.com/apps/dependabot">dependabot[bot]</a></li>
    <li>Bump version.maven-plugin-tools from 3.15.1 to 3.15.2 (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/apache/maven-apache-parent/pull/547">#547</a">https://redirect.github.com/apache/maven-apache-parent/pull/547">#547</a>)
    @<a href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/apps/dependabot">dependabot[bot]</a></li">https://github.com/apps/dependabot">dependabot[bot]</a></li>
    <li>Bump org.apache.maven.plugins:maven-antrun-plugin from 3.1.0 to
    3.2.0 (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/apache/maven-apache-parent/pull/545">#545</a">https://redirect.github.com/apache/maven-apache-parent/pull/545">#545</a>)
    @<a href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/apps/dependabot">dependabot[bot]</a></li">https://github.com/apps/dependabot">dependabot[bot]</a></li>
    <li>Bump org.apache.maven.plugins:maven-enforcer-plugin from 3.6.1 to
    3.6.2 (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/apache/maven-apache-parent/pull/541">#541</a">https://redirect.github.com/apache/maven-apache-parent/pull/541">#541</a>)
    @<a href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/apps/dependabot">dependabot[bot]</a></li">https://github.com/apps/dependabot">dependabot[bot]</a></li>
    <li>Bump org.apache.maven.plugins:maven-scm-plugin from 2.1.0 to 2.2.1
    (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/apache/maven-apache-parent/pull/540">#540</a">https://redirect.github.com/apache/maven-apache-parent/pull/540">#540</a>)
    @<a href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/apps/dependabot">dependabot[bot]</a></li">https://github.com/apps/dependabot">dependabot[bot]</a></li>
    <li>Bump org.apache.maven.plugins:maven-ear-plugin from 3.3.0 to 3.4.0
    (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/apache/maven-apache-parent/pull/527">#527</a">https://redirect.github.com/apache/maven-apache-parent/pull/527">#527</a>)
    @<a href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/apps/dependabot">dependabot[bot]</a></li">https://github.com/apps/dependabot">dependabot[bot]</a></li>
    <li>Bump org.apache.maven.plugins:maven-javadoc-plugin from 3.11.3 to
    3.12.0 (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/apache/maven-apache-parent/pull/538">#538</a">https://redirect.github.com/apache/maven-apache-parent/pull/538">#538</a>)
    @<a href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/apps/dependabot">dependabot[bot]</a></li">https://github.com/apps/dependabot">dependabot[bot]</a></li>
    <li>Bump org.apache.maven.plugins:maven-compiler-plugin from 3.14.0 to
    3.14.1 (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/apache/maven-apache-parent/pull/539">#539</a">https://redirect.github.com/apache/maven-apache-parent/pull/539">#539</a>)
    @<a href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/apps/dependabot">dependabot[bot]</a></li">https://github.com/apps/dependabot">dependabot[bot]</a></li>
    </ul>
    <!-- raw HTML omitted -->
    </blockquote>
    <p>... (truncated)</p>
    </details>
    <details>
    <summary>Commits</summary>
    <ul>
    <li>See full diff in <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/apache/maven-apache-parent/commits">compare">https://github.com/apache/maven-apache-parent/commits">compare
    view</a></li>
    </ul>
    </details>
    <br />
    
    
    [![Dependabot compatibility
    score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.apache:apache&package-manager=maven&previous-version=33&new-version=37)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
    
    You can trigger a rebase of this PR by commenting `@dependabot rebase`.
    
    [//]: # (dependabot-automerge-start)
    [//]: # (dependabot-automerge-end)
    
    ---
    
    <details>
    <summary>Dependabot commands and options</summary>
    <br />
    
    You can trigger Dependabot actions by commenting on this PR:
    - `@dependabot rebase` will rebase this PR
    - `@dependabot recreate` will recreate this PR, overwriting any edits
    that have been made to it
    - `@dependabot show <dependency name> ignore conditions` will show all
    of the ignore conditions of the specified dependency
    - `@dependabot ignore this major version` will close this PR and stop
    Dependabot creating any more for this major version (unless you reopen
    the PR or upgrade to it yourself)
    - `@dependabot ignore this minor version` will close this PR and stop
    Dependabot creating any more for this minor version (unless you reopen
    the PR or upgrade to it yourself)
    - `@dependabot ignore this dependency` will close this PR and stop
    Dependabot creating any more for this dependency (unless you reopen the
    PR or upgrade to it yourself)
    
    
    </details>
    
    > **Note**
    > Automatic rebases have been disabled on this pull request as it has
    been open for over 30 days.
    
    Signed-off-by: dependabot[bot] <support@github.com>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] authored Mar 30, 2026
    Configuration menu
    Copy the full SHA
    0703021 View commit details
    Browse the repository at this point in the history
  6. MINOR: Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.4 t…

    …o 3.4.0 (apache#1088)
    
    Bumps
    [com.diffplug.spotless:spotless-maven-plugin](https://github.com/diffplug/spotless)
    from 2.44.4 to 3.4.0.
    <details>
    <summary>Release notes</summary>
    <p><em>Sourced from <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/diffplug/spotless/releases">com.diffplug.spotless:spotless-maven-plugin's">https://github.com/diffplug/spotless/releases">com.diffplug.spotless:spotless-maven-plugin's
    releases</a>.</em></p>
    <blockquote>
    <h2>Maven Plugin v3.4.0</h2>
    <h3>Added</h3>
    <ul>
    <li>Add <code>tableTest</code> format type for standalone
    <code>.table</code> files. (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/diffplug/spotless/pull/2880">#2880</a>)</li">https://redirect.github.com/diffplug/spotless/pull/2880">#2880</a>)</li>
    </ul>
    <h3>Changes</h3>
    <ul>
    <li>Bump default <code>tabletest-formatter</code> version
    <code>1.0.1</code> -&gt; <code>1.1.1</code>, now works with Java 17+.
    (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/diffplug/spotless/pull/2880">#2880</a>)</li">https://redirect.github.com/diffplug/spotless/pull/2880">#2880</a>)</li>
    </ul>
    <h2>Lib v3.3.1</h2>
    <h3>Fixed</h3>
    <ul>
    <li><code>GitPrePushHookInstaller</code> didn't work on windows, now
    fixed. (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/diffplug/spotless/pull/2562">#2562</a>)</li">https://redirect.github.com/diffplug/spotless/pull/2562">#2562</a>)</li>
    </ul>
    <h2>Lib v3.3.0</h2>
    <h3>Added</h3>
    <ul>
    <li>Allow specifying path to Biome JSON config file directly in
    <code>biome</code> step. Requires biome 2.x. (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/diffplug/spotless/pull/2548">#2548</a>)</li">https://redirect.github.com/diffplug/spotless/pull/2548">#2548</a>)</li>
    <li><code>GitPrePushHookInstaller</code>, a reusable library component
    for installing a Git <code>pre-push</code> hook that runs formatter
    checks. (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/diffplug/spotless/pull/2553">#2553</a>)</li">https://redirect.github.com/diffplug/spotless/pull/2553">#2553</a>)</li>
    <li>Allow setting Eclipse XML config from a string, not only from files
    (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/diffplug/spotless/pull/2361">#2361</a>)</li">https://redirect.github.com/diffplug/spotless/pull/2361">#2361</a>)</li>
    </ul>
    <h2>Changed</h2>
    <ul>
    <li>Bump default <code>gson</code> version to latest <code>2.11.0</code>
    -&gt; <code>2.13.1</code>. (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/diffplug/spotless/pull/2414">#2414</a>)</li">https://redirect.github.com/diffplug/spotless/pull/2414">#2414</a>)</li>
    <li>Bump default <code>jackson</code> version to latest
    <code>2.18.1</code> -&gt; <code>2.19.2</code>. (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/diffplug/spotless/pull/2558">#2558</a>)</li">https://redirect.github.com/diffplug/spotless/pull/2558">#2558</a>)</li>
    <li>Bump default <code>gherkin-utils</code> version to latest
    <code>9.0.0</code> -&gt; <code>9.2.0</code>. (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/diffplug/spotless/pull/2408">#2408</a>)</li">https://redirect.github.com/diffplug/spotless/pull/2408">#2408</a>)</li>
    <li>Bump default <code>cleanthat</code> version to latest
    <code>2.22</code> -&gt; <code>2.23</code>. (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/diffplug/spotless/pull/2556">#2556</a>)</li">https://redirect.github.com/diffplug/spotless/pull/2556">#2556</a>)</li>
    </ul>
    <h2>Maven Plugin v3.3.0</h2>
    <h3>Added</h3>
    <ul>
    <li>Add <code>tabletest-formatter</code> support for Java and Kotlin.
    (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/diffplug/spotless/pull/2860">#2860</a>)</li">https://redirect.github.com/diffplug/spotless/pull/2860">#2860</a>)</li>
    </ul>
    <h3>Fixed</h3>
    <ul>
    <li>Fix the ability to specify a wildcard version (<code>*</code>) for
    external formatter executables, which did not work. (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/diffplug/spotless/pull/2848">#2848</a>)</li">https://redirect.github.com/diffplug/spotless/pull/2848">#2848</a>)</li>
    <li>[fix] <code>ConcurrentModificationException</code> in
    <code>expandWildcardImports</code> (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/diffplug/spotless/issues/2830">#2830</a>)</li">https://redirect.github.com/diffplug/spotless/issues/2830">#2830</a>)</li>
    </ul>
    <h2>Maven Plugin v3.2.1</h2>
    <h3>Fixed</h3>
    <ul>
    <li><code>removeSemicolons()</code> should not be applied to multiline
    strings in groovy <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/diffplug/spotless/issues/2780">#2780</a">https://redirect.github.com/diffplug/spotless/issues/2780">#2780</a>
    (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/diffplug/spotless/issues/2792">#2792</a>)</li">https://redirect.github.com/diffplug/spotless/issues/2792">#2792</a>)</li>
    </ul>
    <h2>Lib v3.2.0</h2>
    <h3>Added</h3>
    <ul>
    <li>Support for <code>idea</code> (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/diffplug/spotless/pull/2020">#2020</a">https://redirect.github.com/diffplug/spotless/pull/2020">#2020</a>,
    <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/diffplug/spotless/pull/2535">#2535</a>)</li">https://redirect.github.com/diffplug/spotless/pull/2535">#2535</a>)</li>
    <li>Add support for removing wildcard imports via
    <code>removeWildcardImports</code> step. (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/diffplug/spotless/pull/2517">#2517</a>)</li">https://redirect.github.com/diffplug/spotless/pull/2517">#2517</a>)</li>
    <li>scalafmt: enforce version consistency between the version configured
    in Spotless and the version declared in Scalafmt config file (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/diffplug/spotless/issues/2460">#2460</a>)</li">https://redirect.github.com/diffplug/spotless/issues/2460">#2460</a>)</li>
    </ul>
    <h3>Fixed</h3>
    <ul>
    <li><code>SortPom</code> disable expandEmptyElements, to avoid empty
    body warnings. (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/diffplug/spotless/pull/2520">#2520</a>)</li">https://redirect.github.com/diffplug/spotless/pull/2520">#2520</a>)</li>
    <li>Fix biome formatter for new major release 2.x of biome (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/diffplug/spotless/pull/2537">#2537</a>)</li">https://redirect.github.com/diffplug/spotless/pull/2537">#2537</a>)</li>
    <li>Make sure npm-based formatters use the correct
    <code>node_modules</code> directory when running in parallel. (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/diffplug/spotless/pull/2542">#2542</a>)</li">https://redirect.github.com/diffplug/spotless/pull/2542">#2542</a>)</li>
    </ul>
    <h3>Changed</h3>
    <ul>
    <li>Bump internal dependencies for npm-based formatters (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/diffplug/spotless/pull/2542">#2542</a>)</li">https://redirect.github.com/diffplug/spotless/pull/2542">#2542</a>)</li>
    </ul>
    <h2>Maven Plugin v3.2.0</h2>
    <h3>Added</h3>
    <ul>
    <li>Add the ability to specify a wildcard version (<code>*</code>) for
    external formatter executables. (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/diffplug/spotless/issues/2757">#2757</a>)</li">https://redirect.github.com/diffplug/spotless/issues/2757">#2757</a>)</li>
    </ul>
    <h3>Changes</h3>
    <ul>
    <li>Dramatic (~100x) performance improvement when using git
    <code>ratchetFrom</code>. (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/diffplug/spotless/pull/2805">#2805</a>)</li">https://redirect.github.com/diffplug/spotless/pull/2805">#2805</a>)</li>
    </ul>
    <h3>Fixed</h3>
    <!-- raw HTML omitted -->
    </blockquote>
    <p>... (truncated)</p>
    </details>
    <details>
    <summary>Commits</summary>
    <ul>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/diffplug/spotless/commit/708a1b0e6383ad2dd34cf3def185bb085a786789"><code>708a1b0</code></a">https://github.com/diffplug/spotless/commit/708a1b0e6383ad2dd34cf3def185bb085a786789"><code>708a1b0</code></a>
    Published maven/3.4.0</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/diffplug/spotless/commit/1cc0163c25b52824cd57b56cdcb8c4cb0c7b4795"><code>1cc0163</code></a">https://github.com/diffplug/spotless/commit/1cc0163c25b52824cd57b56cdcb8c4cb0c7b4795"><code>1cc0163</code></a>
    Published gradle/8.4.0</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/diffplug/spotless/commit/a4cd808f6092c6ed9371205de4af5285beea9533"><code>a4cd808</code></a">https://github.com/diffplug/spotless/commit/a4cd808f6092c6ed9371205de4af5285beea9533"><code>a4cd808</code></a>
    Published lib/4.5.0</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/diffplug/spotless/commit/9066bf6ede907e913fbe30259de0763f1b0b55ea"><code>9066bf6</code></a">https://github.com/diffplug/spotless/commit/9066bf6ede907e913fbe30259de0763f1b0b55ea"><code>9066bf6</code></a>
    Add links to the changelog.</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/diffplug/spotless/commit/db8dc1cc8e83b18ef357a0e660f03556fd792247"><code>db8dc1c</code></a">https://github.com/diffplug/spotless/commit/db8dc1cc8e83b18ef357a0e660f03556fd792247"><code>db8dc1c</code></a>
    Fix for illegal mutation issue with <code>predeclareDeps</code> (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/diffplug/spotless/issues/2892">#2892</a>)</li">https://redirect.github.com/diffplug/spotless/issues/2892">#2892</a>)</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/diffplug/spotless/commit/0eb98a9574304e362f0ca6ddbfb71617de46df75"><code>0eb98a9</code></a">https://github.com/diffplug/spotless/commit/0eb98a9574304e362f0ca6ddbfb71617de46df75"><code>0eb98a9</code></a>
    chore: Updated gradle plugin change</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/diffplug/spotless/commit/3f7f12e649b1085a7937b8730e6a7689a52ca6da"><code>3f7f12e</code></a">https://github.com/diffplug/spotless/commit/3f7f12e649b1085a7937b8730e6a7689a52ca6da"><code>3f7f12e</code></a>
    chore: Removes check for predeclare as it's not needed anymore</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/diffplug/spotless/commit/55c0c5c081b83ad35e92911718e3069a64467c2a"><code>55c0c5c</code></a">https://github.com/diffplug/spotless/commit/55c0c5c081b83ad35e92911718e3069a64467c2a"><code>55c0c5c</code></a>
    fix: IsolatedProjectTest.predeclaredIsUnsupported() is now actually
    supported...</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/diffplug/spotless/commit/47489afd92aa79f56372bd53e82d09a44f606a32"><code>47489af</code></a">https://github.com/diffplug/spotless/commit/47489afd92aa79f56372bd53e82d09a44f606a32"><code>47489af</code></a>
    fix: avoid IllegalMutationException when root project uses
    predeclareDeps() w...</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/diffplug/spotless/commit/4010e8b42c32b8dfac31a988c6820b6b0ef499bd"><code>4010e8b</code></a">https://github.com/diffplug/spotless/commit/4010e8b42c32b8dfac31a988c6820b6b0ef499bd"><code>4010e8b</code></a>
    test: Introduce a test harnessing predeclared deps</li>
    <li>Additional commits viewable in <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/diffplug/spotless/compare/maven/2.44.4...maven/3.4.0">compare">https://github.com/diffplug/spotless/compare/maven/2.44.4...maven/3.4.0">compare
    view</a></li>
    </ul>
    </details>
    <br />
    
    
    [![Dependabot compatibility
    score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=com.diffplug.spotless:spotless-maven-plugin&package-manager=maven&previous-version=2.44.4&new-version=3.4.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
    
    Dependabot will resolve any conflicts with this PR as long as you don't
    alter it yourself. You can also trigger a rebase manually by commenting
    `@dependabot rebase`.
    
    [//]: # (dependabot-automerge-start)
    [//]: # (dependabot-automerge-end)
    
    ---
    
    <details>
    <summary>Dependabot commands and options</summary>
    <br />
    
    You can trigger Dependabot actions by commenting on this PR:
    - `@dependabot rebase` will rebase this PR
    - `@dependabot recreate` will recreate this PR, overwriting any edits
    that have been made to it
    - `@dependabot show <dependency name> ignore conditions` will show all
    of the ignore conditions of the specified dependency
    - `@dependabot ignore this major version` will close this PR and stop
    Dependabot creating any more for this major version (unless you reopen
    the PR or upgrade to it yourself)
    - `@dependabot ignore this minor version` will close this PR and stop
    Dependabot creating any more for this minor version (unless you reopen
    the PR or upgrade to it yourself)
    - `@dependabot ignore this dependency` will close this PR and stop
    Dependabot creating any more for this dependency (unless you reopen the
    PR or upgrade to it yourself)
    
    
    </details>
    
    ---------
    
    Signed-off-by: dependabot[bot] <support@github.com>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    Co-authored-by: JB Onofré <jbonofre@apache.org>
    Co-authored-by: JB Onofré <jb.onofre@dremio.com>
    3 people authored Mar 30, 2026
    Configuration menu
    Copy the full SHA
    e54681b View commit details
    Browse the repository at this point in the history

Commits on Apr 6, 2026

  1. MINOR: [CI] Bump docker/login-action from 4.0.0 to 4.1.0 (apache#1103)

    Bumps [docker/login-action](https://github.com/docker/login-action) from
    4.0.0 to 4.1.0.
    <details>
    <summary>Release notes</summary>
    <p><em>Sourced from <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/docker/login-action/releases">docker/login-action's">https://github.com/docker/login-action/releases">docker/login-action's
    releases</a>.</em></p>
    <blockquote>
    <h2>v4.1.0</h2>
    <ul>
    <li>Fix scoped Docker Hub cleanup path when registry is omitted by <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/crazy-max"><code>@​crazy-max</code></a">https://github.com/crazy-max"><code>@​crazy-max</code></a> in <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/docker/login-action/pull/945">docker/login-action#945</a></li">https://redirect.github.com/docker/login-action/pull/945">docker/login-action#945</a></li>
    <li>Bump <code>@​aws-sdk/client-ecr</code> and
    <code>@​aws-sdk/client-ecr-public</code> to 3.1020.0 in <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/docker/login-action/pull/930">docker/login-action#930</a></li">https://redirect.github.com/docker/login-action/pull/930">docker/login-action#930</a></li>
    <li>Bump <code>@​docker/actions-toolkit</code> from 0.77.0 to 0.86.0 in
    <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/docker/login-action/pull/932">docker/login-action#932</a">https://redirect.github.com/docker/login-action/pull/932">docker/login-action#932</a>
    <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/docker/login-action/pull/936">docker/login-action#936</a></li">https://redirect.github.com/docker/login-action/pull/936">docker/login-action#936</a></li>
    <li>Bump brace-expansion from 1.1.12 to 1.1.13 in <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/docker/login-action/pull/952">docker/login-action#952</a></li">https://redirect.github.com/docker/login-action/pull/952">docker/login-action#952</a></li>
    <li>Bump fast-xml-parser from 5.3.4 to 5.3.6 in <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/docker/login-action/pull/942">docker/login-action#942</a></li">https://redirect.github.com/docker/login-action/pull/942">docker/login-action#942</a></li>
    <li>Bump flatted from 3.3.3 to 3.4.2 in <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/docker/login-action/pull/944">docker/login-action#944</a></li">https://redirect.github.com/docker/login-action/pull/944">docker/login-action#944</a></li>
    <li>Bump glob from 10.3.12 to 10.5.0 in <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/docker/login-action/pull/940">docker/login-action#940</a></li">https://redirect.github.com/docker/login-action/pull/940">docker/login-action#940</a></li>
    <li>Bump handlebars from 4.7.8 to 4.7.9 in <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/docker/login-action/pull/949">docker/login-action#949</a></li">https://redirect.github.com/docker/login-action/pull/949">docker/login-action#949</a></li>
    <li>Bump http-proxy-agent and https-proxy-agent to 8.0.0 in <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/docker/login-action/pull/937">docker/login-action#937</a></li">https://redirect.github.com/docker/login-action/pull/937">docker/login-action#937</a></li>
    <li>Bump lodash from 4.17.23 to 4.18.1 in <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/docker/login-action/pull/958">docker/login-action#958</a></li">https://redirect.github.com/docker/login-action/pull/958">docker/login-action#958</a></li>
    <li>Bump minimatch from 3.1.2 to 3.1.5 in <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/docker/login-action/pull/941">docker/login-action#941</a></li">https://redirect.github.com/docker/login-action/pull/941">docker/login-action#941</a></li>
    <li>Bump picomatch from 4.0.3 to 4.0.4 in <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/docker/login-action/pull/948">docker/login-action#948</a></li">https://redirect.github.com/docker/login-action/pull/948">docker/login-action#948</a></li>
    <li>Bump undici from 6.23.0 to 6.24.1 in <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/docker/login-action/pull/938">docker/login-action#938</a></li">https://redirect.github.com/docker/login-action/pull/938">docker/login-action#938</a></li>
    </ul>
    <p><strong>Full Changelog</strong>: <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/docker/login-action/compare/v4.0.0...v4.1.0">https://github.com/docker/login-action/compare/v4.0.0...v4.1.0</a></p">https://github.com/docker/login-action/compare/v4.0.0...v4.1.0">https://github.com/docker/login-action/compare/v4.0.0...v4.1.0</a></p>
    </blockquote>
    </details>
    <details>
    <summary>Commits</summary>
    <ul>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/docker/login-action/commit/4907a6ddec9925e35a0a9e82d7399ccc52663121"><code>4907a6d</code></a">https://github.com/docker/login-action/commit/4907a6ddec9925e35a0a9e82d7399ccc52663121"><code>4907a6d</code></a>
    Merge pull request <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/docker/login-action/issues/930">#930</a">https://redirect.github.com/docker/login-action/issues/930">#930</a>
    from docker/dependabot/npm_and_yarn/aws-sdk-dependenc...</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/docker/login-action/commit/1e233e691a8881d7f35ca7c2d5dfaaed80b39636"><code>1e233e6</code></a">https://github.com/docker/login-action/commit/1e233e691a8881d7f35ca7c2d5dfaaed80b39636"><code>1e233e6</code></a>
    chore: update generated content</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/docker/login-action/commit/6c24ead68057f18c30c808a431f0b85dc25663cb"><code>6c24ead</code></a">https://github.com/docker/login-action/commit/6c24ead68057f18c30c808a431f0b85dc25663cb"><code>6c24ead</code></a>
    build(deps): bump the aws-sdk-dependencies group with 2 updates</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/docker/login-action/commit/ee034d70944e3546349cd24295914f139342f1e6"><code>ee034d7</code></a">https://github.com/docker/login-action/commit/ee034d70944e3546349cd24295914f139342f1e6"><code>ee034d7</code></a>
    Merge pull request <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/docker/login-action/issues/958">#958</a">https://redirect.github.com/docker/login-action/issues/958">#958</a>
    from docker/dependabot/npm_and_yarn/lodash-4.18.1</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/docker/login-action/commit/1527209db9734bd2352a2dc1a63d79c9aa5358bb"><code>1527209</code></a">https://github.com/docker/login-action/commit/1527209db9734bd2352a2dc1a63d79c9aa5358bb"><code>1527209</code></a>
    Merge pull request <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/docker/login-action/issues/937">#937</a">https://redirect.github.com/docker/login-action/issues/937">#937</a>
    from docker/dependabot/npm_and_yarn/proxy-agent-depen...</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/docker/login-action/commit/d39362aba4d72f8d9d93e0962119840690133e1b"><code>d39362a</code></a">https://github.com/docker/login-action/commit/d39362aba4d72f8d9d93e0962119840690133e1b"><code>d39362a</code></a>
    build(deps): bump lodash from 4.17.23 to 4.18.1</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/docker/login-action/commit/a6f092b568105cbb6d9deb7e55e0a4c5c1025fce"><code>a6f092b</code></a">https://github.com/docker/login-action/commit/a6f092b568105cbb6d9deb7e55e0a4c5c1025fce"><code>a6f092b</code></a>
    chore: update generated content</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/docker/login-action/commit/60953f0bed2120ec69659d271fe18d34bc069779"><code>60953f0</code></a">https://github.com/docker/login-action/commit/60953f0bed2120ec69659d271fe18d34bc069779"><code>60953f0</code></a>
    build(deps): bump the proxy-agent-dependencies group with 2 updates</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/docker/login-action/commit/62c688590fb4ab6c6e89a217ced0a7b2ddcf1340"><code>62c6885</code></a">https://github.com/docker/login-action/commit/62c688590fb4ab6c6e89a217ced0a7b2ddcf1340"><code>62c6885</code></a>
    Merge pull request <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/docker/login-action/issues/936">#936</a">https://redirect.github.com/docker/login-action/issues/936">#936</a>
    from docker/dependabot/npm_and_yarn/docker/actions-to...</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/docker/login-action/commit/102c0e672992d2e992c89b6f4808d65a353b5a1a"><code>102c0e6</code></a">https://github.com/docker/login-action/commit/102c0e672992d2e992c89b6f4808d65a353b5a1a"><code>102c0e6</code></a>
    chore: update generated content</li>
    <li>Additional commits viewable in <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/docker/login-action/compare/b45d80f862d83dbcd57f89517bcf500b2ab88fb2...4907a6ddec9925e35a0a9e82d7399ccc52663121">compare">https://github.com/docker/login-action/compare/b45d80f862d83dbcd57f89517bcf500b2ab88fb2...4907a6ddec9925e35a0a9e82d7399ccc52663121">compare
    view</a></li>
    </ul>
    </details>
    <br />
    
    
    [![Dependabot compatibility
    score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=docker/login-action&package-manager=github_actions&previous-version=4.0.0&new-version=4.1.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
    
    Dependabot will resolve any conflicts with this PR as long as you don't
    alter it yourself. You can also trigger a rebase manually by commenting
    `@dependabot rebase`.
    
    [//]: # (dependabot-automerge-start)
    [//]: # (dependabot-automerge-end)
    
    ---
    
    <details>
    <summary>Dependabot commands and options</summary>
    <br />
    
    You can trigger Dependabot actions by commenting on this PR:
    - `@dependabot rebase` will rebase this PR
    - `@dependabot recreate` will recreate this PR, overwriting any edits
    that have been made to it
    - `@dependabot show <dependency name> ignore conditions` will show all
    of the ignore conditions of the specified dependency
    - `@dependabot ignore this major version` will close this PR and stop
    Dependabot creating any more for this major version (unless you reopen
    the PR or upgrade to it yourself)
    - `@dependabot ignore this minor version` will close this PR and stop
    Dependabot creating any more for this minor version (unless you reopen
    the PR or upgrade to it yourself)
    - `@dependabot ignore this dependency` will close this PR and stop
    Dependabot creating any more for this dependency (unless you reopen the
    PR or upgrade to it yourself)
    
    
    </details>
    
    Signed-off-by: dependabot[bot] <support@github.com>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] authored Apr 6, 2026
    Configuration menu
    Copy the full SHA
    d8ad7b6 View commit details
    Browse the repository at this point in the history
  2. MINOR: Bump checker.framework.version from 3.54.0 to 3.55.1 (apache#1105

    )
    
    Bumps `checker.framework.version` from 3.54.0 to 3.55.1.
    Updates `org.checkerframework:checker-qual` from 3.54.0 to 3.55.1
    <details>
    <summary>Release notes</summary>
    <p><em>Sourced from <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/typetools/checker-framework/releases">org.checkerframework:checker-qual's">https://github.com/typetools/checker-framework/releases">org.checkerframework:checker-qual's
    releases</a>.</em></p>
    <blockquote>
    <h2>Checker Framework 3.55.1</h2>
    <h2>Version 3.55.1 (2026-04-03)</h2>
    <p>No user-visible changes.</p>
    <h2>Checker Framework 3.54.1</h2>
    <h2>Version 3.55.0 (2026-04-02)</h2>
    <h3>User-visible changes</h3>
    <p>The Checker Framework runs under JDK 26 -- that is, it runs on a
    version 26 JVM.</p>
    <p>Removed deprecated command-line option <code>-AskipDirs</code>; use
    <code>-AskipFiles</code>.</p>
    <h3>Implementation details</h3>
    <p>In <code>AnnotatedTypeMirror</code>:</p>
    <ul>
    <li>Renamed <code>getEffectiveAnnotation*()</code> to
    <code>getAnnotation*()</code>.</li>
    <li>Renamed <code>hasEffectiveAnnotation*()</code> to
    <code>hasAnnotation*()</code>.</li>
    </ul>
    <p>Removed deprecated method
    <code>ObjectCreationNode.getConstructor()</code>; use
    <code>getTypeToInstantiate()</code>.</p>
    <h3>Closed issues</h3>
    <p><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/typetools/checker-framework/issues/7079">#7079</a">https://redirect.github.com/typetools/checker-framework/issues/7079">#7079</a>,
    <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/typetools/checker-framework/issues/7489">#7489</a">https://redirect.github.com/typetools/checker-framework/issues/7489">#7489</a>,
    <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/typetools/checker-framework/issues/7539">#7539</a>.</p">https://redirect.github.com/typetools/checker-framework/issues/7539">#7539</a>.</p>
    </blockquote>
    </details>
    <details>
    <summary>Changelog</summary>
    <p><em>Sourced from <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/typetools/checker-framework/blob/master/docs/CHANGELOG.md">org.checkerframework:checker-qual's">https://github.com/typetools/checker-framework/blob/master/docs/CHANGELOG.md">org.checkerframework:checker-qual's
    changelog</a>.</em></p>
    <blockquote>
    <h2>Version 3.55.1 (2026-04-03)</h2>
    <p>No user-visible changes.</p>
    <h2>Version 3.55.0 (2026-04-02)</h2>
    <h3>User-visible changes</h3>
    <p>The Checker Framework runs under JDK 26 -- that is, it runs on a
    version 26 JVM.</p>
    <p>Removed deprecated command-line option <code>-AskipDirs</code>; use
    <code>-AskipFiles</code>.</p>
    <h3>Implementation details</h3>
    <p>In <code>AnnotatedTypeMirror</code>:</p>
    <ul>
    <li>Renamed <code>getEffectiveAnnotation*()</code> to
    <code>getAnnotation*()</code>.</li>
    <li>Renamed <code>hasEffectiveAnnotation*()</code> to
    <code>hasAnnotation*()</code>.</li>
    </ul>
    <p>Removed deprecated method
    <code>ObjectCreationNode.getConstructor()</code>; use
    <code>getTypeToInstantiate()</code>.</p>
    <h3>Closed issues</h3>
    <p><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/typetools/checker-framework/issues/7079">#7079</a">https://redirect.github.com/typetools/checker-framework/issues/7079">#7079</a>,
    <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/typetools/checker-framework/issues/7489">#7489</a">https://redirect.github.com/typetools/checker-framework/issues/7489">#7489</a>,
    <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/typetools/checker-framework/issues/7539">#7539</a>.</p">https://redirect.github.com/typetools/checker-framework/issues/7539">#7539</a>.</p>
    </blockquote>
    </details>
    <details>
    <summary>Commits</summary>
    <ul>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/typetools/checker-framework/commit/bf4ceb7660825e275f8c7561056310c47d48b81b"><code>bf4ceb7</code></a">https://github.com/typetools/checker-framework/commit/bf4ceb7660825e275f8c7561056310c47d48b81b"><code>bf4ceb7</code></a>
    new release 3.55.1</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/typetools/checker-framework/commit/b8096660563a2349201e126c362c2000de20c1c5"><code>b809666</code></a">https://github.com/typetools/checker-framework/commit/b8096660563a2349201e126c362c2000de20c1c5"><code>b809666</code></a>
    Remove unneeded argument</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/typetools/checker-framework/commit/448019e7d43607b0d1d23e94baae0cd937e0219b"><code>448019e</code></a">https://github.com/typetools/checker-framework/commit/448019e7d43607b0d1d23e94baae0cd937e0219b"><code>448019e</code></a>
    Make scripts executable in .zip file</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/typetools/checker-framework/commit/3bc1190be960534f1c5536ab74b760198ff5e70a"><code>3bc1190</code></a">https://github.com/typetools/checker-framework/commit/3bc1190be960534f1c5536ab74b760198ff5e70a"><code>3bc1190</code></a>
    Update directory copying</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/typetools/checker-framework/commit/22df6d61a52c4183401d2fa355a59645c16feca3"><code>22df6d6</code></a">https://github.com/typetools/checker-framework/commit/22df6d61a52c4183401d2fa355a59645c16feca3"><code>22df6d6</code></a>
    Update release date</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/typetools/checker-framework/commit/3fc441bc5df12983f716282aeebaf8f6b934bfe6"><code>3fc441b</code></a">https://github.com/typetools/checker-framework/commit/3fc441bc5df12983f716282aeebaf8f6b934bfe6"><code>3fc441b</code></a>
    Note about permissions</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/typetools/checker-framework/commit/6baaa5287134b9e616cbcbc40a413f21d498e1a1"><code>6baaa52</code></a">https://github.com/typetools/checker-framework/commit/6baaa5287134b9e616cbcbc40a413f21d498e1a1"><code>6baaa52</code></a>
    Brevity</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/typetools/checker-framework/commit/d4ea6b993144c91992077e864c8cbf07ee929dac"><code>d4ea6b9</code></a">https://github.com/typetools/checker-framework/commit/d4ea6b993144c91992077e864c8cbf07ee929dac"><code>d4ea6b9</code></a>
    Set version number to 3.55.1</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/typetools/checker-framework/commit/6b03e94dcf412a24859cf5ac9d17c2a4de65d978"><code>6b03e94</code></a">https://github.com/typetools/checker-framework/commit/6b03e94dcf412a24859cf5ac9d17c2a4de65d978"><code>6b03e94</code></a>
    Improve release instructions</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/typetools/checker-framework/commit/65613a0f0f05d39d74b36c40ba6ca398e1929157"><code>65613a0</code></a">https://github.com/typetools/checker-framework/commit/65613a0f0f05d39d74b36c40ba6ca398e1929157"><code>65613a0</code></a>
    Fix Nullness extra tests</li>
    <li>Additional commits viewable in <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/typetools/checker-framework/compare/checker-framework-3.54.0...checker-framework-3.55.1">compare">https://github.com/typetools/checker-framework/compare/checker-framework-3.54.0...checker-framework-3.55.1">compare
    view</a></li>
    </ul>
    </details>
    <br />
    
    Updates `org.checkerframework:checker` from 3.54.0 to 3.55.1
    <details>
    <summary>Release notes</summary>
    <p><em>Sourced from <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/typetools/checker-framework/releases">org.checkerframework:checker's">https://github.com/typetools/checker-framework/releases">org.checkerframework:checker's
    releases</a>.</em></p>
    <blockquote>
    <h2>Checker Framework 3.55.1</h2>
    <h2>Version 3.55.1 (2026-04-03)</h2>
    <p>No user-visible changes.</p>
    <h2>Checker Framework 3.54.1</h2>
    <h2>Version 3.55.0 (2026-04-02)</h2>
    <h3>User-visible changes</h3>
    <p>The Checker Framework runs under JDK 26 -- that is, it runs on a
    version 26 JVM.</p>
    <p>Removed deprecated command-line option <code>-AskipDirs</code>; use
    <code>-AskipFiles</code>.</p>
    <h3>Implementation details</h3>
    <p>In <code>AnnotatedTypeMirror</code>:</p>
    <ul>
    <li>Renamed <code>getEffectiveAnnotation*()</code> to
    <code>getAnnotation*()</code>.</li>
    <li>Renamed <code>hasEffectiveAnnotation*()</code> to
    <code>hasAnnotation*()</code>.</li>
    </ul>
    <p>Removed deprecated method
    <code>ObjectCreationNode.getConstructor()</code>; use
    <code>getTypeToInstantiate()</code>.</p>
    <h3>Closed issues</h3>
    <p><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/typetools/checker-framework/issues/7079">#7079</a">https://redirect.github.com/typetools/checker-framework/issues/7079">#7079</a>,
    <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/typetools/checker-framework/issues/7489">#7489</a">https://redirect.github.com/typetools/checker-framework/issues/7489">#7489</a>,
    <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/typetools/checker-framework/issues/7539">#7539</a>.</p">https://redirect.github.com/typetools/checker-framework/issues/7539">#7539</a>.</p>
    </blockquote>
    </details>
    <details>
    <summary>Changelog</summary>
    <p><em>Sourced from <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/typetools/checker-framework/blob/master/docs/CHANGELOG.md">org.checkerframework:checker's">https://github.com/typetools/checker-framework/blob/master/docs/CHANGELOG.md">org.checkerframework:checker's
    changelog</a>.</em></p>
    <blockquote>
    <h2>Version 3.55.1 (2026-04-03)</h2>
    <p>No user-visible changes.</p>
    <h2>Version 3.55.0 (2026-04-02)</h2>
    <h3>User-visible changes</h3>
    <p>The Checker Framework runs under JDK 26 -- that is, it runs on a
    version 26 JVM.</p>
    <p>Removed deprecated command-line option <code>-AskipDirs</code>; use
    <code>-AskipFiles</code>.</p>
    <h3>Implementation details</h3>
    <p>In <code>AnnotatedTypeMirror</code>:</p>
    <ul>
    <li>Renamed <code>getEffectiveAnnotation*()</code> to
    <code>getAnnotation*()</code>.</li>
    <li>Renamed <code>hasEffectiveAnnotation*()</code> to
    <code>hasAnnotation*()</code>.</li>
    </ul>
    <p>Removed deprecated method
    <code>ObjectCreationNode.getConstructor()</code>; use
    <code>getTypeToInstantiate()</code>.</p>
    <h3>Closed issues</h3>
    <p><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/typetools/checker-framework/issues/7079">#7079</a">https://redirect.github.com/typetools/checker-framework/issues/7079">#7079</a>,
    <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/typetools/checker-framework/issues/7489">#7489</a">https://redirect.github.com/typetools/checker-framework/issues/7489">#7489</a>,
    <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/typetools/checker-framework/issues/7539">#7539</a>.</p">https://redirect.github.com/typetools/checker-framework/issues/7539">#7539</a>.</p>
    </blockquote>
    </details>
    <details>
    <summary>Commits</summary>
    <ul>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/typetools/checker-framework/commit/bf4ceb7660825e275f8c7561056310c47d48b81b"><code>bf4ceb7</code></a">https://github.com/typetools/checker-framework/commit/bf4ceb7660825e275f8c7561056310c47d48b81b"><code>bf4ceb7</code></a>
    new release 3.55.1</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/typetools/checker-framework/commit/b8096660563a2349201e126c362c2000de20c1c5"><code>b809666</code></a">https://github.com/typetools/checker-framework/commit/b8096660563a2349201e126c362c2000de20c1c5"><code>b809666</code></a>
    Remove unneeded argument</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/typetools/checker-framework/commit/448019e7d43607b0d1d23e94baae0cd937e0219b"><code>448019e</code></a">https://github.com/typetools/checker-framework/commit/448019e7d43607b0d1d23e94baae0cd937e0219b"><code>448019e</code></a>
    Make scripts executable in .zip file</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/typetools/checker-framework/commit/3bc1190be960534f1c5536ab74b760198ff5e70a"><code>3bc1190</code></a">https://github.com/typetools/checker-framework/commit/3bc1190be960534f1c5536ab74b760198ff5e70a"><code>3bc1190</code></a>
    Update directory copying</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/typetools/checker-framework/commit/22df6d61a52c4183401d2fa355a59645c16feca3"><code>22df6d6</code></a">https://github.com/typetools/checker-framework/commit/22df6d61a52c4183401d2fa355a59645c16feca3"><code>22df6d6</code></a>
    Update release date</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/typetools/checker-framework/commit/3fc441bc5df12983f716282aeebaf8f6b934bfe6"><code>3fc441b</code></a">https://github.com/typetools/checker-framework/commit/3fc441bc5df12983f716282aeebaf8f6b934bfe6"><code>3fc441b</code></a>
    Note about permissions</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/typetools/checker-framework/commit/6baaa5287134b9e616cbcbc40a413f21d498e1a1"><code>6baaa52</code></a">https://github.com/typetools/checker-framework/commit/6baaa5287134b9e616cbcbc40a413f21d498e1a1"><code>6baaa52</code></a>
    Brevity</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/typetools/checker-framework/commit/d4ea6b993144c91992077e864c8cbf07ee929dac"><code>d4ea6b9</code></a">https://github.com/typetools/checker-framework/commit/d4ea6b993144c91992077e864c8cbf07ee929dac"><code>d4ea6b9</code></a>
    Set version number to 3.55.1</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/typetools/checker-framework/commit/6b03e94dcf412a24859cf5ac9d17c2a4de65d978"><code>6b03e94</code></a">https://github.com/typetools/checker-framework/commit/6b03e94dcf412a24859cf5ac9d17c2a4de65d978"><code>6b03e94</code></a>
    Improve release instructions</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/typetools/checker-framework/commit/65613a0f0f05d39d74b36c40ba6ca398e1929157"><code>65613a0</code></a">https://github.com/typetools/checker-framework/commit/65613a0f0f05d39d74b36c40ba6ca398e1929157"><code>65613a0</code></a>
    Fix Nullness extra tests</li>
    <li>Additional commits viewable in <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/typetools/checker-framework/compare/checker-framework-3.54.0...checker-framework-3.55.1">compare">https://github.com/typetools/checker-framework/compare/checker-framework-3.54.0...checker-framework-3.55.1">compare
    view</a></li>
    </ul>
    </details>
    <br />
    
    
    Dependabot will resolve any conflicts with this PR as long as you don't
    alter it yourself. You can also trigger a rebase manually by commenting
    `@dependabot rebase`.
    
    [//]: # (dependabot-automerge-start)
    [//]: # (dependabot-automerge-end)
    
    ---
    
    <details>
    <summary>Dependabot commands and options</summary>
    <br />
    
    You can trigger Dependabot actions by commenting on this PR:
    - `@dependabot rebase` will rebase this PR
    - `@dependabot recreate` will recreate this PR, overwriting any edits
    that have been made to it
    - `@dependabot show <dependency name> ignore conditions` will show all
    of the ignore conditions of the specified dependency
    - `@dependabot ignore this major version` will close this PR and stop
    Dependabot creating any more for this major version (unless you reopen
    the PR or upgrade to it yourself)
    - `@dependabot ignore this minor version` will close this PR and stop
    Dependabot creating any more for this minor version (unless you reopen
    the PR or upgrade to it yourself)
    - `@dependabot ignore this dependency` will close this PR and stop
    Dependabot creating any more for this dependency (unless you reopen the
    PR or upgrade to it yourself)
    
    
    </details>
    
    Signed-off-by: dependabot[bot] <support@github.com>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] authored Apr 6, 2026
    Configuration menu
    Copy the full SHA
    13c8b93 View commit details
    Browse the repository at this point in the history
  3. MINOR: Bump dep.hadoop.version from 3.4.3 to 3.5.0 (apache#1104)

    Bumps `dep.hadoop.version` from 3.4.3 to 3.5.0.
    Updates `org.apache.hadoop:hadoop-client-runtime` from 3.4.3 to 3.5.0
    
    Updates `org.apache.hadoop:hadoop-client-api` from 3.4.3 to 3.5.0
    
    Updates `org.apache.hadoop:hadoop-common` from 3.4.3 to 3.5.0
    
    
    Dependabot will resolve any conflicts with this PR as long as you don't
    alter it yourself. You can also trigger a rebase manually by commenting
    `@dependabot rebase`.
    
    [//]: # (dependabot-automerge-start)
    [//]: # (dependabot-automerge-end)
    
    ---
    
    <details>
    <summary>Dependabot commands and options</summary>
    <br />
    
    You can trigger Dependabot actions by commenting on this PR:
    - `@dependabot rebase` will rebase this PR
    - `@dependabot recreate` will recreate this PR, overwriting any edits
    that have been made to it
    - `@dependabot show <dependency name> ignore conditions` will show all
    of the ignore conditions of the specified dependency
    - `@dependabot ignore this major version` will close this PR and stop
    Dependabot creating any more for this major version (unless you reopen
    the PR or upgrade to it yourself)
    - `@dependabot ignore this minor version` will close this PR and stop
    Dependabot creating any more for this minor version (unless you reopen
    the PR or upgrade to it yourself)
    - `@dependabot ignore this dependency` will close this PR and stop
    Dependabot creating any more for this dependency (unless you reopen the
    PR or upgrade to it yourself)
    
    
    </details>
    
    Signed-off-by: dependabot[bot] <support@github.com>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] authored Apr 6, 2026
    Configuration menu
    Copy the full SHA
    d952ed4 View commit details
    Browse the repository at this point in the history

Commits on Apr 10, 2026

  1. apacheGH-1107: Increase publish job timeout (apache#1108)

    ## What's Changed
    
    We have many artifacts and need `sleep 1` per upload. So 5min timeout is
    too short.
    
    Closes apache#1107.
    kou authored Apr 10, 2026
    Configuration menu
    Copy the full SHA
    e4f8c92 View commit details
    Browse the repository at this point in the history

Commits on Apr 13, 2026

  1. MINOR: [CI] Bump actions/github-script from 8 to 9 (apache#1110)

    Bumps [actions/github-script](https://github.com/actions/github-script)
    from 8 to 9.
    <details>
    <summary>Release notes</summary>
    <p><em>Sourced from <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/actions/github-script/releases">actions/github-script's">https://github.com/actions/github-script/releases">actions/github-script's
    releases</a>.</em></p>
    <blockquote>
    <h2>v9.0.0</h2>
    <p><strong>New features:</strong></p>
    <ul>
    <li><strong><code>getOctokit</code> factory function</strong> —
    Available directly in the script context. Create additional
    authenticated Octokit clients with different tokens for multi-token
    workflows, GitHub App tokens, and cross-org access. See <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/actions/github-script#creating-additional-clients-with-getoctokit">Creating">https://github.com/actions/github-script#creating-additional-clients-with-getoctokit">Creating
    additional clients with <code>getOctokit</code></a> for details and
    examples.</li>
    <li><strong>Orchestration ID in user-agent</strong> — The
    <code>ACTIONS_ORCHESTRATION_ID</code> environment variable is
    automatically appended to the user-agent string for request
    tracing.</li>
    </ul>
    <p><strong>Breaking changes:</strong></p>
    <ul>
    <li><strong><code>require('@actions/github')</code> no longer works in
    scripts.</strong> The upgrade to <code>@actions/github</code> v9
    (ESM-only) means <code>require('@actions/github')</code> will fail at
    runtime. If you previously used patterns like <code>const { getOctokit }
    = require('@actions/github')</code> to create secondary clients, use the
    new injected <code>getOctokit</code> function instead — it's available
    directly in the script context with no imports needed.</li>
    <li><code>getOctokit</code> is now an injected function parameter.
    Scripts that declare <code>const getOctokit = ...</code> or <code>let
    getOctokit = ...</code> will get a <code>SyntaxError</code> because
    JavaScript does not allow <code>const</code>/<code>let</code>
    redeclaration of function parameters. Use the injected
    <code>getOctokit</code> directly, or use <code>var getOctokit =
    ...</code> if you need to redeclare it.</li>
    <li>If your script accesses other <code>@actions/github</code> internals
    beyond the standard <code>github</code>/<code>octokit</code> client, you
    may need to update those references for v9 compatibility.</li>
    </ul>
    <h2>What's Changed</h2>
    <ul>
    <li>Add ACTIONS_ORCHESTRATION_ID to user-agent string by <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/Copilot"><code>@​Copilot</code></a">https://github.com/Copilot"><code>@​Copilot</code></a> in <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/actions/github-script/pull/695">actions/github-script#695</a></li">https://redirect.github.com/actions/github-script/pull/695">actions/github-script#695</a></li>
    <li>ci: use deployment: false for integration test environments by <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/salmanmkc"><code>@​salmanmkc</code></a">https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/actions/github-script/pull/712">actions/github-script#712</a></li">https://redirect.github.com/actions/github-script/pull/712">actions/github-script#712</a></li>
    <li>feat!: add getOctokit to script context, upgrade
    <code>@​actions/github</code> v9, <code>@​octokit/core</code> v7, and
    related packages by <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/salmanmkc"><code>@​salmanmkc</code></a">https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/actions/github-script/pull/700">actions/github-script#700</a></li">https://redirect.github.com/actions/github-script/pull/700">actions/github-script#700</a></li>
    </ul>
    <h2>New Contributors</h2>
    <ul>
    <li><a href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/Copilot"><code>@​Copilot</code></a">https://github.com/Copilot"><code>@​Copilot</code></a> made
    their first contribution in <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/actions/github-script/pull/695">actions/github-script#695</a></li">https://redirect.github.com/actions/github-script/pull/695">actions/github-script#695</a></li>
    </ul>
    <p><strong>Full Changelog</strong>: <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/actions/github-script/compare/v8.0.0...v9.0.0">https://github.com/actions/github-script/compare/v8.0.0...v9.0.0</a></p">https://github.com/actions/github-script/compare/v8.0.0...v9.0.0">https://github.com/actions/github-script/compare/v8.0.0...v9.0.0</a></p>
    </blockquote>
    </details>
    <details>
    <summary>Commits</summary>
    <ul>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/actions/github-script/commit/3a2844b7e9c422d3c10d287c895573f7108da1b3"><code>3a2844b</code></a">https://github.com/actions/github-script/commit/3a2844b7e9c422d3c10d287c895573f7108da1b3"><code>3a2844b</code></a>
    Merge pull request <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/actions/github-script/issues/700">#700</a">https://redirect.github.com/actions/github-script/issues/700">#700</a>
    from actions/salmanmkc/expose-getoctokit + prepare re...</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/actions/github-script/commit/ca10bbdd1a7739de09e99a200c7a59f5d73a4079"><code>ca10bbd</code></a">https://github.com/actions/github-script/commit/ca10bbdd1a7739de09e99a200c7a59f5d73a4079"><code>ca10bbd</code></a>
    fix: use <code>@​octokit/core/</code>types import for v7
    compatibility</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/actions/github-script/commit/86e48e20ac85c970ed1f96e718fd068173948b7b"><code>86e48e2</code></a">https://github.com/actions/github-script/commit/86e48e20ac85c970ed1f96e718fd068173948b7b"><code>86e48e2</code></a>
    merge: incorporate main branch changes</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/actions/github-script/commit/c1084728b5b935ec4ddc1e4cee877b01797b3ff9"><code>c108472</code></a">https://github.com/actions/github-script/commit/c1084728b5b935ec4ddc1e4cee877b01797b3ff9"><code>c108472</code></a>
    chore: rebuild dist for v9 upgrade and getOctokit factory</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/actions/github-script/commit/afff112e4f8b57c718168af75b89ce00bc8d091d"><code>afff112</code></a">https://github.com/actions/github-script/commit/afff112e4f8b57c718168af75b89ce00bc8d091d"><code>afff112</code></a>
    Merge pull request <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/actions/github-script/issues/712">#712</a">https://redirect.github.com/actions/github-script/issues/712">#712</a>
    from actions/salmanmkc/deployment-false + fix user-ag...</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/actions/github-script/commit/ff8117e5b78c415f814f39ad6998f424fee7b817"><code>ff8117e</code></a">https://github.com/actions/github-script/commit/ff8117e5b78c415f814f39ad6998f424fee7b817"><code>ff8117e</code></a>
    ci: fix user-agent test to handle orchestration ID</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/actions/github-script/commit/81c6b7876079abe10ff715951c9fc7b3e1ab389d"><code>81c6b78</code></a">https://github.com/actions/github-script/commit/81c6b7876079abe10ff715951c9fc7b3e1ab389d"><code>81c6b78</code></a>
    ci: use deployment: false to suppress deployment noise from integration
    tests</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/actions/github-script/commit/3953caf8858d318f37b6cc53a9f5708859b5a7b7"><code>3953caf</code></a">https://github.com/actions/github-script/commit/3953caf8858d318f37b6cc53a9f5708859b5a7b7"><code>3953caf</code></a>
    docs: update README examples from <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/v8"><code>@​v8</code></a">https://github.com/v8"><code>@​v8</code></a> to <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/v9"><code>@​v9</code></a">https://github.com/v9"><code>@​v9</code></a>, add getOctokit docs
    and v9 brea...</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/actions/github-script/commit/c17d55b90dcdb3d554d0027a6c180a7adc2daf78"><code>c17d55b</code></a">https://github.com/actions/github-script/commit/c17d55b90dcdb3d554d0027a6c180a7adc2daf78"><code>c17d55b</code></a>
    ci: add getOctokit integration test job</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/actions/github-script/commit/a047196d9a02fe92098771cafbb98c2f1814e408"><code>a047196</code></a">https://github.com/actions/github-script/commit/a047196d9a02fe92098771cafbb98c2f1814e408"><code>a047196</code></a>
    test: add getOctokit integration tests via callAsyncFunction</li>
    <li>Additional commits viewable in <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/actions/github-script/compare/v8...v9">compare">https://github.com/actions/github-script/compare/v8...v9">compare
    view</a></li>
    </ul>
    </details>
    <br />
    
    
    [![Dependabot compatibility
    score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/github-script&package-manager=github_actions&previous-version=8&new-version=9)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
    
    Dependabot will resolve any conflicts with this PR as long as you don't
    alter it yourself. You can also trigger a rebase manually by commenting
    `@dependabot rebase`.
    
    [//]: # (dependabot-automerge-start)
    [//]: # (dependabot-automerge-end)
    
    ---
    
    <details>
    <summary>Dependabot commands and options</summary>
    <br />
    
    You can trigger Dependabot actions by commenting on this PR:
    - `@dependabot rebase` will rebase this PR
    - `@dependabot recreate` will recreate this PR, overwriting any edits
    that have been made to it
    - `@dependabot show <dependency name> ignore conditions` will show all
    of the ignore conditions of the specified dependency
    - `@dependabot ignore this major version` will close this PR and stop
    Dependabot creating any more for this major version (unless you reopen
    the PR or upgrade to it yourself)
    - `@dependabot ignore this minor version` will close this PR and stop
    Dependabot creating any more for this minor version (unless you reopen
    the PR or upgrade to it yourself)
    - `@dependabot ignore this dependency` will close this PR and stop
    Dependabot creating any more for this dependency (unless you reopen the
    PR or upgrade to it yourself)
    
    
    </details>
    
    Signed-off-by: dependabot[bot] <support@github.com>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] authored Apr 13, 2026
    Configuration menu
    Copy the full SHA
    4ca6017 View commit details
    Browse the repository at this point in the history
  2. MINOR: [CI] Bump actions/upload-artifact from 7.0.0 to 7.0.1 (apache#…

    …1111)
    
    Bumps
    [actions/upload-artifact](https://github.com/actions/upload-artifact)
    from 7.0.0 to 7.0.1.
    <details>
    <summary>Release notes</summary>
    <p><em>Sourced from <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/actions/upload-artifact/releases">actions/upload-artifact's">https://github.com/actions/upload-artifact/releases">actions/upload-artifact's
    releases</a>.</em></p>
    <blockquote>
    <h2>v7.0.1</h2>
    <h2>What's Changed</h2>
    <ul>
    <li>Update the readme with direct upload details by <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/danwkennedy"><code>@​danwkennedy</code></a">https://github.com/danwkennedy"><code>@​danwkennedy</code></a> in
    <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/actions/upload-artifact/pull/795">actions/upload-artifact#795</a></li">https://redirect.github.com/actions/upload-artifact/pull/795">actions/upload-artifact#795</a></li>
    <li>Readme: bump all the example versions to v7 by <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/danwkennedy"><code>@​danwkennedy</code></a">https://github.com/danwkennedy"><code>@​danwkennedy</code></a> in
    <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/actions/upload-artifact/pull/796">actions/upload-artifact#796</a></li">https://redirect.github.com/actions/upload-artifact/pull/796">actions/upload-artifact#796</a></li>
    <li>Include changes in typespec/ts-http-runtime 0.3.5 by <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/yacaovsnc"><code>@​yacaovsnc</code></a">https://github.com/yacaovsnc"><code>@​yacaovsnc</code></a> in <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/actions/upload-artifact/pull/797">actions/upload-artifact#797</a></li">https://redirect.github.com/actions/upload-artifact/pull/797">actions/upload-artifact#797</a></li>
    </ul>
    <p><strong>Full Changelog</strong>: <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/actions/upload-artifact/compare/v7...v7.0.1">https://github.com/actions/upload-artifact/compare/v7...v7.0.1</a></p">https://github.com/actions/upload-artifact/compare/v7...v7.0.1">https://github.com/actions/upload-artifact/compare/v7...v7.0.1</a></p>
    </blockquote>
    </details>
    <details>
    <summary>Commits</summary>
    <ul>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/actions/upload-artifact/commit/043fb46d1a93c77aae656e7c1c64a875d1fc6a0a"><code>043fb46</code></a">https://github.com/actions/upload-artifact/commit/043fb46d1a93c77aae656e7c1c64a875d1fc6a0a"><code>043fb46</code></a>
    Merge pull request <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/actions/upload-artifact/issues/797">#797</a">https://redirect.github.com/actions/upload-artifact/issues/797">#797</a>
    from actions/yacaovsnc/update-dependency</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/actions/upload-artifact/commit/634250c1388765ea7ed0f053e636f1f399000b94"><code>634250c</code></a">https://github.com/actions/upload-artifact/commit/634250c1388765ea7ed0f053e636f1f399000b94"><code>634250c</code></a>
    Include changes in typespec/ts-http-runtime 0.3.5</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/actions/upload-artifact/commit/e454baaac2be505c9450e11b8f3215c6fc023ce8"><code>e454baa</code></a">https://github.com/actions/upload-artifact/commit/e454baaac2be505c9450e11b8f3215c6fc023ce8"><code>e454baa</code></a>
    Readme: bump all the example versions to v7 (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/actions/upload-artifact/issues/796">#796</a>)</li">https://redirect.github.com/actions/upload-artifact/issues/796">#796</a>)</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/actions/upload-artifact/commit/74fad66b98a6d799dc004d3353ccd0e6f6b2530e"><code>74fad66</code></a">https://github.com/actions/upload-artifact/commit/74fad66b98a6d799dc004d3353ccd0e6f6b2530e"><code>74fad66</code></a>
    Update the readme with direct upload details (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/actions/upload-artifact/issues/795">#795</a>)</li">https://redirect.github.com/actions/upload-artifact/issues/795">#795</a>)</li>
    <li>See full diff in <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/actions/upload-artifact/compare/bbbca2ddaa5d8feaa63e36b76fdaad77386f024f...043fb46d1a93c77aae656e7c1c64a875d1fc6a0a">compare">https://github.com/actions/upload-artifact/compare/bbbca2ddaa5d8feaa63e36b76fdaad77386f024f...043fb46d1a93c77aae656e7c1c64a875d1fc6a0a">compare
    view</a></li>
    </ul>
    </details>
    <br />
    
    
    [![Dependabot compatibility
    score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/upload-artifact&package-manager=github_actions&previous-version=7.0.0&new-version=7.0.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
    
    Dependabot will resolve any conflicts with this PR as long as you don't
    alter it yourself. You can also trigger a rebase manually by commenting
    `@dependabot rebase`.
    
    [//]: # (dependabot-automerge-start)
    [//]: # (dependabot-automerge-end)
    
    ---
    
    <details>
    <summary>Dependabot commands and options</summary>
    <br />
    
    You can trigger Dependabot actions by commenting on this PR:
    - `@dependabot rebase` will rebase this PR
    - `@dependabot recreate` will recreate this PR, overwriting any edits
    that have been made to it
    - `@dependabot show <dependency name> ignore conditions` will show all
    of the ignore conditions of the specified dependency
    - `@dependabot ignore this major version` will close this PR and stop
    Dependabot creating any more for this major version (unless you reopen
    the PR or upgrade to it yourself)
    - `@dependabot ignore this minor version` will close this PR and stop
    Dependabot creating any more for this minor version (unless you reopen
    the PR or upgrade to it yourself)
    - `@dependabot ignore this dependency` will close this PR and stop
    Dependabot creating any more for this dependency (unless you reopen the
    PR or upgrade to it yourself)
    
    
    </details>
    
    Signed-off-by: dependabot[bot] <support@github.com>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] authored Apr 13, 2026
    Configuration menu
    Copy the full SHA
    0d55ba7 View commit details
    Browse the repository at this point in the history

Commits on Apr 21, 2026

  1. MINOR: Bump com.google.api.grpc:proto-google-common-protos from 2.67.…

    …0 to 2.70.0 (apache#1124)
    
    Bumps
    [com.google.api.grpc:proto-google-common-protos](https://github.com/googleapis/sdk-platform-java)
    from 2.67.0 to 2.70.0.
    <details>
    <summary>Release notes</summary>
    <p><em>Sourced from <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/googleapis/sdk-platform-java/releases">com.google.api.grpc:proto-google-common-protos's">https://github.com/googleapis/sdk-platform-java/releases">com.google.api.grpc:proto-google-common-protos's
    releases</a>.</em></p>
    <blockquote>
    <h2>v2.68.0</h2>
    <h2><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/googleapis/sdk-platform-java/compare/v2.67.0...v2.68.0">2.68.0</a">https://github.com/googleapis/sdk-platform-java/compare/v2.67.0...v2.68.0">2.68.0</a>
    (2026-03-17)</h2>
    <h3>Features</h3>
    <ul>
    <li>Add client request duration metric. (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/googleapis/sdk-platform-java/issues/4132">#4132</a">https://redirect.github.com/googleapis/sdk-platform-java/issues/4132">#4132</a>)
    (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/googleapis/sdk-platform-java/commit/6a763979c2c5427f0a7ba23708fb7948520662d8">6a76397</a>)</li">https://github.com/googleapis/sdk-platform-java/commit/6a763979c2c5427f0a7ba23708fb7948520662d8">6a76397</a>)</li>
    <li>Add more attributes to golden signals metrics. (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/googleapis/sdk-platform-java/issues/4135">#4135</a">https://redirect.github.com/googleapis/sdk-platform-java/issues/4135">#4135</a>)
    (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/googleapis/sdk-platform-java/commit/59d0624ec5a85580a503f719897597161f529e3f">59d0624</a>)</li">https://github.com/googleapis/sdk-platform-java/commit/59d0624ec5a85580a503f719897597161f529e3f">59d0624</a>)</li>
    <li><strong>gax-httpjson:</strong> add HttpJsonErrorParser utility (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/googleapis/sdk-platform-java/issues/4137">#4137</a">https://redirect.github.com/googleapis/sdk-platform-java/issues/4137">#4137</a>)
    (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/googleapis/sdk-platform-java/commit/a1b7565ef752259d79d3f1288b85120c6ac7452b">a1b7565</a>)</li">https://github.com/googleapis/sdk-platform-java/commit/a1b7565ef752259d79d3f1288b85120c6ac7452b">a1b7565</a>)</li>
    <li><strong>generator:</strong> add extra allowed modules that will not
    be removed from the monorepo if they are present (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/googleapis/sdk-platform-java/issues/4124">#4124</a">https://redirect.github.com/googleapis/sdk-platform-java/issues/4124">#4124</a>)
    (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/googleapis/sdk-platform-java/commit/774fe6ede6bf25e150fb405dfe3bac9d85e21169">774fe6e</a>)</li">https://github.com/googleapis/sdk-platform-java/commit/774fe6ede6bf25e150fb405dfe3bac9d85e21169">774fe6e</a>)</li>
    <li><strong>o11y:</strong> introduce <code>gcp.client.repo</code> and
    <code>gcp.client.artifact</code> attributes (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/googleapis/sdk-platform-java/issues/4120">#4120</a">https://redirect.github.com/googleapis/sdk-platform-java/issues/4120">#4120</a>)
    (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/googleapis/sdk-platform-java/commit/105f644209cb78845a423d949cb7633a86d07868">105f644</a>)</li">https://github.com/googleapis/sdk-platform-java/commit/105f644209cb78845a423d949cb7633a86d07868">105f644</a>)</li>
    <li><strong>o11y:</strong> Introduce <code>rpc.system.name</code> and
    <code>rpc.method</code> in gRPC (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/googleapis/sdk-platform-java/issues/4121">#4121</a">https://redirect.github.com/googleapis/sdk-platform-java/issues/4121">#4121</a>)
    (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/googleapis/sdk-platform-java/commit/7ab6d2e5784f264558b7aca6f23e771361dbea3a">7ab6d2e</a>)</li">https://github.com/googleapis/sdk-platform-java/commit/7ab6d2e5784f264558b7aca6f23e771361dbea3a">7ab6d2e</a>)</li>
    <li><strong>o11y:</strong> introduce server.port attribute (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/googleapis/sdk-platform-java/issues/4128">#4128</a">https://redirect.github.com/googleapis/sdk-platform-java/issues/4128">#4128</a>)
    (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/googleapis/sdk-platform-java/commit/56aa3438393e1992bb8f688291fb12030ec9bc0e">56aa343</a>)</li">https://github.com/googleapis/sdk-platform-java/commit/56aa3438393e1992bb8f688291fb12030ec9bc0e">56aa343</a>)</li>
    </ul>
    <h3>Bug Fixes</h3>
    <ul>
    <li>add null checks for ApiTracerFactory in ClientContext (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/googleapis/sdk-platform-java/issues/4122">#4122</a">https://redirect.github.com/googleapis/sdk-platform-java/issues/4122">#4122</a>)
    (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/googleapis/sdk-platform-java/commit/4b3dbe29b32dd0fba6c7a5f4a08fafa2798eeca5">4b3dbe2</a>)</li">https://github.com/googleapis/sdk-platform-java/commit/4b3dbe29b32dd0fba6c7a5f4a08fafa2798eeca5">4b3dbe2</a>)</li>
    <li>Decrease log level for directpath warnings outside GCE (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/googleapis/sdk-platform-java/issues/4139">#4139</a">https://redirect.github.com/googleapis/sdk-platform-java/issues/4139">#4139</a>)
    (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/googleapis/sdk-platform-java/commit/c9651e7fa1501726798c0e38365e4b7c0acabc55">c9651e7</a>)</li">https://github.com/googleapis/sdk-platform-java/commit/c9651e7fa1501726798c0e38365e4b7c0acabc55">c9651e7</a>)</li>
    <li><strong>gax-grpc:</strong> add pick_first fallback to direct path
    service config (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/googleapis/sdk-platform-java/issues/4143">#4143</a">https://redirect.github.com/googleapis/sdk-platform-java/issues/4143">#4143</a>)
    (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/googleapis/sdk-platform-java/commit/b150fe9ccfd5a97319388be4079699722aa033dc">b150fe9</a>)</li">https://github.com/googleapis/sdk-platform-java/commit/b150fe9ccfd5a97319388be4079699722aa033dc">b150fe9</a>)</li>
    <li>Populate method level attributes in metrics recording (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/googleapis/sdk-platform-java/issues/4149">#4149</a">https://redirect.github.com/googleapis/sdk-platform-java/issues/4149">#4149</a>)
    (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/googleapis/sdk-platform-java/commit/7b7e6c99251e1aecb1831084f5576aa9e8e48930">7b7e6c9</a>)</li">https://github.com/googleapis/sdk-platform-java/commit/7b7e6c99251e1aecb1831084f5576aa9e8e48930">7b7e6c9</a>)</li>
    <li>suppress warnings in generated projects for non-idiomatic durations
    (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/googleapis/sdk-platform-java/issues/4119">#4119</a">https://redirect.github.com/googleapis/sdk-platform-java/issues/4119">#4119</a>)
    (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/googleapis/sdk-platform-java/commit/4206e6ed7546d6b8330dcb8dc29179e59677ccd3">4206e6e</a>)</li">https://github.com/googleapis/sdk-platform-java/commit/4206e6ed7546d6b8330dcb8dc29179e59677ccd3">4206e6e</a>)</li>
    <li>Use ServiceName + MethodName as the regex for Otel (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/googleapis/sdk-platform-java/issues/2543">#2543</a">https://redirect.github.com/googleapis/sdk-platform-java/issues/2543">#2543</a>)
    (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/googleapis/sdk-platform-java/commit/b9ae73fba59ba32e9688d11c2b3db51fe0d68d8d">b9ae73f</a>)</li">https://github.com/googleapis/sdk-platform-java/commit/b9ae73fba59ba32e9688d11c2b3db51fe0d68d8d">b9ae73f</a>)</li>
    </ul>
    <h3>Documentation</h3>
    <ul>
    <li><strong>hermetic_build:</strong> fix config field name in readme (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/googleapis/sdk-platform-java/issues/4130">#4130</a">https://redirect.github.com/googleapis/sdk-platform-java/issues/4130">#4130</a>)
    (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/googleapis/sdk-platform-java/commit/a0c8f67f5a425d9a365b8e451b18add2c5947a11">a0c8f67</a>)</li">https://github.com/googleapis/sdk-platform-java/commit/a0c8f67f5a425d9a365b8e451b18add2c5947a11">a0c8f67</a>)</li>
    </ul>
    </blockquote>
    </details>
    <details>
    <summary>Changelog</summary>
    <p><em>Sourced from <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/googleapis/sdk-platform-java/blob/main/CHANGELOG.md">com.google.api.grpc:proto-google-common-protos's">https://github.com/googleapis/sdk-platform-java/blob/main/CHANGELOG.md">com.google.api.grpc:proto-google-common-protos's
    changelog</a>.</em></p>
    <blockquote>
    <h1>Changelog</h1>
    <h2><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/googleapis/sdk-platform-java/compare/v2.67.0...v2.68.0">2.68.0</a">https://github.com/googleapis/sdk-platform-java/compare/v2.67.0...v2.68.0">2.68.0</a>
    (2026-03-17)</h2>
    <h3>Features</h3>
    <ul>
    <li>Add client request duration metric. (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/googleapis/sdk-platform-java/issues/4132">#4132</a">https://redirect.github.com/googleapis/sdk-platform-java/issues/4132">#4132</a>)
    (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/googleapis/sdk-platform-java/commit/6a763979c2c5427f0a7ba23708fb7948520662d8">6a76397</a>)</li">https://github.com/googleapis/sdk-platform-java/commit/6a763979c2c5427f0a7ba23708fb7948520662d8">6a76397</a>)</li>
    <li>Add more attributes to golden signals metrics. (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/googleapis/sdk-platform-java/issues/4135">#4135</a">https://redirect.github.com/googleapis/sdk-platform-java/issues/4135">#4135</a>)
    (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/googleapis/sdk-platform-java/commit/59d0624ec5a85580a503f719897597161f529e3f">59d0624</a>)</li">https://github.com/googleapis/sdk-platform-java/commit/59d0624ec5a85580a503f719897597161f529e3f">59d0624</a>)</li>
    <li><strong>gax-httpjson:</strong> add HttpJsonErrorParser utility (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/googleapis/sdk-platform-java/issues/4137">#4137</a">https://redirect.github.com/googleapis/sdk-platform-java/issues/4137">#4137</a>)
    (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/googleapis/sdk-platform-java/commit/a1b7565ef752259d79d3f1288b85120c6ac7452b">a1b7565</a>)</li">https://github.com/googleapis/sdk-platform-java/commit/a1b7565ef752259d79d3f1288b85120c6ac7452b">a1b7565</a>)</li>
    <li><strong>generator:</strong> add extra allowed modules that will not
    be removed from the monorepo if they are present (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/googleapis/sdk-platform-java/issues/4124">#4124</a">https://redirect.github.com/googleapis/sdk-platform-java/issues/4124">#4124</a>)
    (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/googleapis/sdk-platform-java/commit/774fe6ede6bf25e150fb405dfe3bac9d85e21169">774fe6e</a>)</li">https://github.com/googleapis/sdk-platform-java/commit/774fe6ede6bf25e150fb405dfe3bac9d85e21169">774fe6e</a>)</li>
    <li><strong>o11y:</strong> introduce <code>gcp.client.repo</code> and
    <code>gcp.client.artifact</code> attributes (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/googleapis/sdk-platform-java/issues/4120">#4120</a">https://redirect.github.com/googleapis/sdk-platform-java/issues/4120">#4120</a>)
    (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/googleapis/sdk-platform-java/commit/105f644209cb78845a423d949cb7633a86d07868">105f644</a>)</li">https://github.com/googleapis/sdk-platform-java/commit/105f644209cb78845a423d949cb7633a86d07868">105f644</a>)</li>
    <li><strong>o11y:</strong> Introduce <code>rpc.system.name</code> and
    <code>rpc.method</code> in gRPC (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/googleapis/sdk-platform-java/issues/4121">#4121</a">https://redirect.github.com/googleapis/sdk-platform-java/issues/4121">#4121</a>)
    (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/googleapis/sdk-platform-java/commit/7ab6d2e5784f264558b7aca6f23e771361dbea3a">7ab6d2e</a>)</li">https://github.com/googleapis/sdk-platform-java/commit/7ab6d2e5784f264558b7aca6f23e771361dbea3a">7ab6d2e</a>)</li>
    <li><strong>o11y:</strong> introduce server.port attribute (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/googleapis/sdk-platform-java/issues/4128">#4128</a">https://redirect.github.com/googleapis/sdk-platform-java/issues/4128">#4128</a>)
    (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/googleapis/sdk-platform-java/commit/56aa3438393e1992bb8f688291fb12030ec9bc0e">56aa343</a>)</li">https://github.com/googleapis/sdk-platform-java/commit/56aa3438393e1992bb8f688291fb12030ec9bc0e">56aa343</a>)</li>
    </ul>
    <h3>Bug Fixes</h3>
    <ul>
    <li>add null checks for ApiTracerFactory in ClientContext (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/googleapis/sdk-platform-java/issues/4122">#4122</a">https://redirect.github.com/googleapis/sdk-platform-java/issues/4122">#4122</a>)
    (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/googleapis/sdk-platform-java/commit/4b3dbe29b32dd0fba6c7a5f4a08fafa2798eeca5">4b3dbe2</a>)</li">https://github.com/googleapis/sdk-platform-java/commit/4b3dbe29b32dd0fba6c7a5f4a08fafa2798eeca5">4b3dbe2</a>)</li>
    <li>Decrease log level for directpath warnings outside GCE (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/googleapis/sdk-platform-java/issues/4139">#4139</a">https://redirect.github.com/googleapis/sdk-platform-java/issues/4139">#4139</a>)
    (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/googleapis/sdk-platform-java/commit/c9651e7fa1501726798c0e38365e4b7c0acabc55">c9651e7</a>)</li">https://github.com/googleapis/sdk-platform-java/commit/c9651e7fa1501726798c0e38365e4b7c0acabc55">c9651e7</a>)</li>
    <li><strong>gax-grpc:</strong> add pick_first fallback to direct path
    service config (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/googleapis/sdk-platform-java/issues/4143">#4143</a">https://redirect.github.com/googleapis/sdk-platform-java/issues/4143">#4143</a>)
    (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/googleapis/sdk-platform-java/commit/b150fe9ccfd5a97319388be4079699722aa033dc">b150fe9</a>)</li">https://github.com/googleapis/sdk-platform-java/commit/b150fe9ccfd5a97319388be4079699722aa033dc">b150fe9</a>)</li>
    <li>Populate method level attributes in metrics recording (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/googleapis/sdk-platform-java/issues/4149">#4149</a">https://redirect.github.com/googleapis/sdk-platform-java/issues/4149">#4149</a>)
    (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/googleapis/sdk-platform-java/commit/7b7e6c99251e1aecb1831084f5576aa9e8e48930">7b7e6c9</a>)</li">https://github.com/googleapis/sdk-platform-java/commit/7b7e6c99251e1aecb1831084f5576aa9e8e48930">7b7e6c9</a>)</li>
    <li>suppress warnings in generated projects for non-idiomatic durations
    (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/googleapis/sdk-platform-java/issues/4119">#4119</a">https://redirect.github.com/googleapis/sdk-platform-java/issues/4119">#4119</a>)
    (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/googleapis/sdk-platform-java/commit/4206e6ed7546d6b8330dcb8dc29179e59677ccd3">4206e6e</a>)</li">https://github.com/googleapis/sdk-platform-java/commit/4206e6ed7546d6b8330dcb8dc29179e59677ccd3">4206e6e</a>)</li>
    <li>Use ServiceName + MethodName as the regex for Otel (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/googleapis/sdk-platform-java/issues/2543">#2543</a">https://redirect.github.com/googleapis/sdk-platform-java/issues/2543">#2543</a>)
    (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/googleapis/sdk-platform-java/commit/b9ae73fba59ba32e9688d11c2b3db51fe0d68d8d">b9ae73f</a>)</li">https://github.com/googleapis/sdk-platform-java/commit/b9ae73fba59ba32e9688d11c2b3db51fe0d68d8d">b9ae73f</a>)</li>
    </ul>
    <h3>Documentation</h3>
    <ul>
    <li><strong>hermetic_build:</strong> fix config field name in readme (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/googleapis/sdk-platform-java/issues/4130">#4130</a">https://redirect.github.com/googleapis/sdk-platform-java/issues/4130">#4130</a>)
    (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/googleapis/sdk-platform-java/commit/a0c8f67f5a425d9a365b8e451b18add2c5947a11">a0c8f67</a>)</li">https://github.com/googleapis/sdk-platform-java/commit/a0c8f67f5a425d9a365b8e451b18add2c5947a11">a0c8f67</a>)</li>
    </ul>
    </blockquote>
    </details>
    <details>
    <summary>Commits</summary>
    <ul>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/googleapis/sdk-platform-java/commit/27fe524365a5bcecfab71165c3d2ec95ff85b5a4"><code>27fe524</code></a">https://github.com/googleapis/sdk-platform-java/commit/27fe524365a5bcecfab71165c3d2ec95ff85b5a4"><code>27fe524</code></a>
    chore(main): release 2.62.0 (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/googleapis/sdk-platform-java/issues/3884">#3884</a>)</li">https://redirect.github.com/googleapis/sdk-platform-java/issues/3884">#3884</a>)</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/googleapis/sdk-platform-java/commit/a660a869d2edbfc4b98e4f06c4885f520d45d869"><code>a660a86</code></a">https://github.com/googleapis/sdk-platform-java/commit/a660a869d2edbfc4b98e4f06c4885f520d45d869"><code>a660a86</code></a>
    chore: Update the upper bound dependencies file (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/googleapis/sdk-platform-java/issues/3886">#3886</a>)</li">https://redirect.github.com/googleapis/sdk-platform-java/issues/3886">#3886</a>)</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/googleapis/sdk-platform-java/commit/592e899c516288b0a60b69525ba12d6f29bc6200"><code>592e899</code></a">https://github.com/googleapis/sdk-platform-java/commit/592e899c516288b0a60b69525ba12d6f29bc6200"><code>592e899</code></a>
    feat: Set sampledToLocalTracing flag to true for all gRPC
    MethodDescriptors (...</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/googleapis/sdk-platform-java/commit/fc80c7b6e0e2b1d1100cc836a864a128bee426e5"><code>fc80c7b</code></a">https://github.com/googleapis/sdk-platform-java/commit/fc80c7b6e0e2b1d1100cc836a864a128bee426e5"><code>fc80c7b</code></a>
    chore: Fix dependency CI tests (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/googleapis/sdk-platform-java/issues/3883">#3883</a>)</li">https://redirect.github.com/googleapis/sdk-platform-java/issues/3883">#3883</a>)</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/googleapis/sdk-platform-java/commit/210464d5409fea56967a28f7eafe76e71a2ef5ef"><code>210464d</code></a">https://github.com/googleapis/sdk-platform-java/commit/210464d5409fea56967a28f7eafe76e71a2ef5ef"><code>210464d</code></a>
    ci: Test upper bound dependenices file in Github CI (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/googleapis/sdk-platform-java/issues/3877">#3877</a>)</li">https://redirect.github.com/googleapis/sdk-platform-java/issues/3877">#3877</a>)</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/googleapis/sdk-platform-java/commit/f392d901bb77402972ee3c75e84a519b13382ade"><code>f392d90</code></a">https://github.com/googleapis/sdk-platform-java/commit/f392d901bb77402972ee3c75e84a519b13382ade"><code>f392d90</code></a>
    chore: Update auto triage guidelines (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/googleapis/sdk-platform-java/issues/3882">#3882</a>)</li">https://redirect.github.com/googleapis/sdk-platform-java/issues/3882">#3882</a>)</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/googleapis/sdk-platform-java/commit/7b1a15149db9106cfd4b6a65ed93b92432baf461"><code>7b1a151</code></a">https://github.com/googleapis/sdk-platform-java/commit/7b1a15149db9106cfd4b6a65ed93b92432baf461"><code>7b1a151</code></a>
    ci: Fix gemini cli issues triage (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/googleapis/sdk-platform-java/issues/3881">#3881</a>)</li">https://redirect.github.com/googleapis/sdk-platform-java/issues/3881">#3881</a>)</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/googleapis/sdk-platform-java/commit/00195e637101037eb16d544a770754459173e7e7"><code>00195e6</code></a">https://github.com/googleapis/sdk-platform-java/commit/00195e637101037eb16d544a770754459173e7e7"><code>00195e6</code></a>
    chore: Enable Gemini CLI Github Actions (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/googleapis/sdk-platform-java/issues/3880">#3880</a>)</li">https://redirect.github.com/googleapis/sdk-platform-java/issues/3880">#3880</a>)</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/googleapis/sdk-platform-java/commit/c34e3848ad771c66d30a9dd38322d23286931277"><code>c34e384</code></a">https://github.com/googleapis/sdk-platform-java/commit/c34e3848ad771c66d30a9dd38322d23286931277"><code>c34e384</code></a>
    chore: Add initial GEMINI.md file (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/googleapis/sdk-platform-java/issues/3879">#3879</a>)</li">https://redirect.github.com/googleapis/sdk-platform-java/issues/3879">#3879</a>)</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/googleapis/sdk-platform-java/commit/48792bcb295a151797dfdeaeb0ed33a2940603ad"><code>48792bc</code></a">https://github.com/googleapis/sdk-platform-java/commit/48792bcb295a151797dfdeaeb0ed33a2940603ad"><code>48792bc</code></a>
    chore(main): release 2.61.1-SNAPSHOT (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/googleapis/sdk-platform-java/issues/3876">#3876</a>)</li">https://redirect.github.com/googleapis/sdk-platform-java/issues/3876">#3876</a>)</li>
    <li>Additional commits viewable in <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/googleapis/sdk-platform-java/compare/v2.67.0...gax/v2.70.0">compare">https://github.com/googleapis/sdk-platform-java/compare/v2.67.0...gax/v2.70.0">compare
    view</a></li>
    </ul>
    </details>
    <br />
    
    
    [![Dependabot compatibility
    score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=com.google.api.grpc:proto-google-common-protos&package-manager=maven&previous-version=2.67.0&new-version=2.70.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
    
    Dependabot will resolve any conflicts with this PR as long as you don't
    alter it yourself. You can also trigger a rebase manually by commenting
    `@dependabot rebase`.
    
    [//]: # (dependabot-automerge-start)
    [//]: # (dependabot-automerge-end)
    
    ---
    
    <details>
    <summary>Dependabot commands and options</summary>
    <br />
    
    You can trigger Dependabot actions by commenting on this PR:
    - `@dependabot rebase` will rebase this PR
    - `@dependabot recreate` will recreate this PR, overwriting any edits
    that have been made to it
    - `@dependabot show <dependency name> ignore conditions` will show all
    of the ignore conditions of the specified dependency
    - `@dependabot ignore this major version` will close this PR and stop
    Dependabot creating any more for this major version (unless you reopen
    the PR or upgrade to it yourself)
    - `@dependabot ignore this minor version` will close this PR and stop
    Dependabot creating any more for this minor version (unless you reopen
    the PR or upgrade to it yourself)
    - `@dependabot ignore this dependency` will close this PR and stop
    Dependabot creating any more for this dependency (unless you reopen the
    PR or upgrade to it yourself)
    
    
    </details>
    
    Signed-off-by: dependabot[bot] <support@github.com>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] authored Apr 21, 2026
    Configuration menu
    Copy the full SHA
    8d3e8dd View commit details
    Browse the repository at this point in the history
  2. MINOR: Bump com.google.guava:guava-bom from 33.5.0-jre to 33.6.0-jre (a…

    …pache#1123)
    
    Bumps [com.google.guava:guava-bom](https://github.com/google/guava) from
    33.5.0-jre to 33.6.0-jre.
    <details>
    <summary>Release notes</summary>
    <p><em>Sourced from <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/google/guava/releases">com.google.guava:guava-bom's">https://github.com/google/guava/releases">com.google.guava:guava-bom's
    releases</a>.</em></p>
    <blockquote>
    <h2>33.6.0</h2>
    <h3>Maven</h3>
    <pre lang="xml"><code>&lt;dependency&gt;
      &lt;groupId&gt;com.google.guava&lt;/groupId&gt;
      &lt;artifactId&gt;guava&lt;/artifactId&gt;
      &lt;version&gt;33.6.0-jre&lt;/version&gt;
      &lt;!-- or, for Android: --&gt;
      &lt;version&gt;33.6.0-android&lt;/version&gt;
    &lt;/dependency&gt;
    </code></pre>
    <h3>Jar files</h3>
    <ul>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://repo1.maven.org/maven2/com/google/guava/guava/33.6.0-jre/guava-33.6.0-jre.jar">33.6.0-jre.jar</a></li" rel="nofollow">https://repo1.maven.org/maven2/com/google/guava/guava/33.6.0-jre/guava-33.6.0-jre.jar">33.6.0-jre.jar</a></li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://repo1.maven.org/maven2/com/google/guava/guava/33.6.0-android/guava-33.6.0-android.jar">33.6.0-android.jar</a></li" rel="nofollow">https://repo1.maven.org/maven2/com/google/guava/guava/33.6.0-android/guava-33.6.0-android.jar">33.6.0-android.jar</a></li>
    </ul>
    <p>Guava requires <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/google/guava/wiki/UseGuavaInYourBuild#what-about-guavas-own-dependencies">one">https://github.com/google/guava/wiki/UseGuavaInYourBuild#what-about-guavas-own-dependencies">one
    runtime dependency</a>, which you can download here:</p>
    <ul>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://repo1.maven.org/maven2/com/google/guava/failureaccess/1.0.3/failureaccess-1.0.3.jar">failureaccess-1.0.3.jar</a></li" rel="nofollow">https://repo1.maven.org/maven2/com/google/guava/failureaccess/1.0.3/failureaccess-1.0.3.jar">failureaccess-1.0.3.jar</a></li>
    </ul>
    <h3>Javadoc</h3>
    <ul>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://guava.dev/releases/33.6.0-jre/api/docs/">33.6.0-jre</a></li" rel="nofollow">https://guava.dev/releases/33.6.0-jre/api/docs/">33.6.0-jre</a></li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://guava.dev/releases/33.6.0-android/api/docs/">33.6.0-android</a></li" rel="nofollow">https://guava.dev/releases/33.6.0-android/api/docs/">33.6.0-android</a></li>
    </ul>
    <h3>JDiff</h3>
    <ul>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://guava.dev/releases/33.6.0-jre/api/diffs/">33.6.0-jre" rel="nofollow">https://guava.dev/releases/33.6.0-jre/api/diffs/">33.6.0-jre vs.
    33.5.0-jre</a></li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://guava.dev/releases/33.6.0-android/api/diffs/">33.6.0-android" rel="nofollow">https://guava.dev/releases/33.6.0-android/api/diffs/">33.6.0-android
    vs. 33.5.0-android</a></li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://guava.dev/releases/33.6.0-android/api/androiddiffs/">33.6.0-android" rel="nofollow">https://guava.dev/releases/33.6.0-android/api/androiddiffs/">33.6.0-android
    vs. 33.6.0-jre</a></li>
    </ul>
    <h3>Changelog</h3>
    <ul>
    <li>Migrated some classes from <code>finalize()</code> to
    <code>PhantomReference</code> in preparation for <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://openjdk.org/jeps/421">the" rel="nofollow">https://openjdk.org/jeps/421">the removal of finalization</a>.
    (786b619dd6, 7c6b17c, aeef90988d)</li>
    <li><code>cache</code>: Deprecated <code>CacheBuilder</code> APIs that
    use <code>TimeUnit</code> in favor of those that use
    <code>Duration</code>. (73f8b0bb84)</li>
    <li><code>collect</code>: Added <code>toImmutableSortedMap</code>
    collectors that use the natural comparator. (64d70b9f94)</li>
    <li><code>collect</code>: Changed <code>ConcurrentHashMultiset</code>,
    <code>ImmutableMap</code> and <code>TreeMultiset</code> deserialization
    to <a href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://openjdk.org/jeps/500">avoid" rel="nofollow">https://openjdk.org/jeps/500">avoid mutating
    <code>final</code> fields</a>. In extremely unlikely scenarios in which
    an instance of that type contains an object that refers back to that
    instance, this could lead to <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://docs.oracle.com/en/java/javase/26/docs/specs/serialization/input.html#the-readresolve-method:~:text=in%20cases%20where%20an%20object%20being%20serialized%20nominates%20a%20replacement%20object%20whose%20object%20graph%20has%20a%20reference%20to%20the%20original%20object">a" rel="nofollow">https://docs.oracle.com/en/java/javase/26/docs/specs/serialization/input.html#the-readresolve-method:~:text=in%20cases%20where%20an%20object%20being%20serialized%20nominates%20a%20replacement%20object%20whose%20object%20graph%20has%20a%20reference%20to%20the%20original%20object">a
    broken instance</a> that throws <code>NullPointerException</code> when
    used. (8240c7e596, 046468055f)</li>
    <li><code>graph</code>: Removed <code>@beta</code> from all APIs in the
    package. (dae9566b73)</li>
    <li><code>graph</code>: Added support to
    <code>Graphs.transitiveClosure()</code> for different strategies for
    adding self-loops. (2e13df25b2)</li>
    <li><code>graph</code>: Added an <code>asNetwork()</code> view to
    <code>Graph</code> and <code>ValueGraph</code>. (909c593c61)</li>
    <li><code>hash</code>: Added <code>BloomFilter.serializedSize()</code>.
    (df9bcc251a)</li>
    <li><code>net</code>: Added <code>HttpHeaders.CDN_CACHE_CONTROL</code>.
    (75331b5030)</li>
    </ul>
    </blockquote>
    </details>
    <details>
    <summary>Commits</summary>
    <ul>
    <li>See full diff in <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/google/guava/commits">compare">https://github.com/google/guava/commits">compare view</a></li>
    </ul>
    </details>
    <br />
    
    
    [![Dependabot compatibility
    score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=com.google.guava:guava-bom&package-manager=maven&previous-version=33.5.0-jre&new-version=33.6.0-jre)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
    
    Dependabot will resolve any conflicts with this PR as long as you don't
    alter it yourself. You can also trigger a rebase manually by commenting
    `@dependabot rebase`.
    
    [//]: # (dependabot-automerge-start)
    [//]: # (dependabot-automerge-end)
    
    ---
    
    <details>
    <summary>Dependabot commands and options</summary>
    <br />
    
    You can trigger Dependabot actions by commenting on this PR:
    - `@dependabot rebase` will rebase this PR
    - `@dependabot recreate` will recreate this PR, overwriting any edits
    that have been made to it
    - `@dependabot show <dependency name> ignore conditions` will show all
    of the ignore conditions of the specified dependency
    - `@dependabot ignore this major version` will close this PR and stop
    Dependabot creating any more for this major version (unless you reopen
    the PR or upgrade to it yourself)
    - `@dependabot ignore this minor version` will close this PR and stop
    Dependabot creating any more for this minor version (unless you reopen
    the PR or upgrade to it yourself)
    - `@dependabot ignore this dependency` will close this PR and stop
    Dependabot creating any more for this dependency (unless you reopen the
    PR or upgrade to it yourself)
    
    
    </details>
    
    Signed-off-by: dependabot[bot] <support@github.com>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] authored Apr 21, 2026
    Configuration menu
    Copy the full SHA
    3dca92b View commit details
    Browse the repository at this point in the history
  3. MINOR: Bump org.bouncycastle:bcpkix-jdk18on from 1.83 to 1.84 (apache…

    …#1122)
    
    Bumps
    [org.bouncycastle:bcpkix-jdk18on](https://github.com/bcgit/bc-java) from
    1.83 to 1.84.
    <details>
    <summary>Changelog</summary>
    <p><em>Sourced from <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/bcgit/bc-java/blob/main/docs/releasenotes.html">org.bouncycastle:bcpkix-jdk18on's">https://github.com/bcgit/bc-java/blob/main/docs/releasenotes.html">org.bouncycastle:bcpkix-jdk18on's
    changelog</a>.</em></p>
    <blockquote>
    <!-- raw HTML omitted -->
    <!-- raw HTML omitted -->
    <!-- raw HTML omitted -->
    </blockquote>
    <p>... (truncated)</p>
    </details>
    <details>
    <summary>Commits</summary>
    <ul>
    <li>See full diff in <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/bcgit/bc-java/commits">compare">https://github.com/bcgit/bc-java/commits">compare view</a></li>
    </ul>
    </details>
    <br />
    
    
    [![Dependabot compatibility
    score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.bouncycastle:bcpkix-jdk18on&package-manager=maven&previous-version=1.83&new-version=1.84)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
    
    Dependabot will resolve any conflicts with this PR as long as you don't
    alter it yourself. You can also trigger a rebase manually by commenting
    `@dependabot rebase`.
    
    [//]: # (dependabot-automerge-start)
    [//]: # (dependabot-automerge-end)
    
    ---
    
    <details>
    <summary>Dependabot commands and options</summary>
    <br />
    
    You can trigger Dependabot actions by commenting on this PR:
    - `@dependabot rebase` will rebase this PR
    - `@dependabot recreate` will recreate this PR, overwriting any edits
    that have been made to it
    - `@dependabot show <dependency name> ignore conditions` will show all
    of the ignore conditions of the specified dependency
    - `@dependabot ignore this major version` will close this PR and stop
    Dependabot creating any more for this major version (unless you reopen
    the PR or upgrade to it yourself)
    - `@dependabot ignore this minor version` will close this PR and stop
    Dependabot creating any more for this minor version (unless you reopen
    the PR or upgrade to it yourself)
    - `@dependabot ignore this dependency` will close this PR and stop
    Dependabot creating any more for this dependency (unless you reopen the
    PR or upgrade to it yourself)
    
    
    </details>
    
    Signed-off-by: dependabot[bot] <support@github.com>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] authored Apr 21, 2026
    Configuration menu
    Copy the full SHA
    980b514 View commit details
    Browse the repository at this point in the history

Commits on Apr 27, 2026

  1. MINOR: Bump checker.framework.version from 3.55.1 to 4.0.0 (apache#1113)

    Bumps `checker.framework.version` from 3.55.1 to 4.0.0.
    Updates `org.checkerframework:checker-qual` from 3.55.1 to 4.0.0
    <details>
    <summary>Release notes</summary>
    <p><em>Sourced from <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/typetools/checker-framework/releases">org.checkerframework:checker-qual's">https://github.com/typetools/checker-framework/releases">org.checkerframework:checker-qual's
    releases</a>.</em></p>
    <blockquote>
    <h2>Release 4.0.0 of the Checker Framework</h2>
    <h2>Version 4.0.0 (2026-04-07)</h2>
    <h3>User-visible changes</h3>
    <p>To run the Checker Framework, you need to use a JDK 17 or later
    version of javac. That is, you need to use JDK 17 or later when
    compiling your code.</p>
    <p>The Checker Framework can type-check any Java project, including
    projects that compile to Java 8 or 11 bytecodes and run on JRE versions
    8 or 11. That is, your code can run under any release of Java, from Java
    8 onward.</p>
    <p>The type qualifiers and utility libraries in
    <code>checker-qual.jar</code> and <code>checker-util.jar</code> still
    use Java 11 bytecode. Thus, they may be used in projects that run under
    Java 11 or later.</p>
    <h3>Changes since version 3.0.0</h3>
    <p>Since version 3.0.0, 91 authors have made over 4500 commits and
    closed over 600 issues. Thanks to everyone who contributed!</p>
    <p>New checkers include:</p>
    <ul>
    <li>The <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://checkerframework.org/manual/#index-checker">Index" rel="nofollow">https://checkerframework.org/manual/#index-checker">Index
    Checker</a> warns about out-of-bounds accesses to arrays and
    strings.</li>
    <li>The <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://checkerframework.org/manual/#initialized-fields-checker">Initialized" rel="nofollow">https://checkerframework.org/manual/#initialized-fields-checker">Initialized
    Fields Checker</a> warns if a constructor does not initialize a
    field.</li>
    <li>The <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://checkerframework.org/manual/#resource-leak-checker">Resource" rel="nofollow">https://checkerframework.org/manual/#resource-leak-checker">Resource
    Leak Checker</a> guarantees that every resource is closed rather than
    leaked. Examples of resources are a channel, executor,
    <code>ExecutionControl</code>, file, <code>FileLock</code>,
    <code>Formatter</code>, reader, <code>Scanner</code>, socket, stream,
    writer, etc.</li>
    <li>The <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://checkerframework.org/manual/#sql-quotes-checker">SQL" rel="nofollow">https://checkerframework.org/manual/#sql-quotes-checker">SQL
    Quotes Checker</a> helps prevent SQL injection vulnerabilities.</li>
    </ul>
    <p>New command-line arguments include:</p>
    <ul>
    <li><code>-AskipFiles</code>, <code>-AonlyFiles</code></li>
    <li><code>-AassumeSideEffectFree</code>,
    <code>-AassumeDeterministic</code>, <code>-AassumePure</code>,
    <code>-AassumePureGetters</code></li>
    <li><code>-AuseConservativeDefaultsForUncheckedCode</code></li>
    <li><code>-AignoreRawTypeArguments</code></li>
    <li><code>-AwarnRedundantAnnotations</code></li>
    <li><code>-Ainfer=ajava</code>, <code>-AinferOutputDirectory</code>,
    <code>-AinferOutputOriginal</code>,
    <code>-AshowWpiFailedInferences</code></li>
    <li><code>-AshowSuppressWarningsStrings</code>,
    <code>-AwarnUnneededSuppressionsExceptions</code></li>
    <li><code>-AshowPrefixInWarningMessages</code></li>
    <li><code>-AstubNoWarnIfNotFound</code>, <code>-AstubWarnNote</code>,
    <code>-AmergeStubsWithSource</code></li>
    <li><code>-Aonelinemsg</code>, <code>-AdumpOnErrors</code>,
    <code>-AexceptionLineSeparator</code></li>
    <li><code>-ApermitMissingJdk</code>, <code>-AparseAllJdk</code></li>
    <li><code>-AslowTypecheckingSeconds</code></li>
    <li><code>-Aversion</code>, <code>-AprintGitProperties</code></li>
    <li>You can pass an option to only a particular checker (not all
    checkers) by using an underscore prefix.</li>
    </ul>
    <p>Other improvements include thousands of enhancements and bug fixes --
    too many to list here.</p>
    <h3>Implementation details</h3>
    <p>All previously-deprecated methods and classes have been removed. If
    your project builds upon the Checker Framework, we suggest that you
    upgrade to version 3.55.1, resolve all the deprecation warnings, then
    upgrade to version 4.0.0.</p>
    </blockquote>
    </details>
    <details>
    <summary>Changelog</summary>
    <p><em>Sourced from <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/typetools/checker-framework/blob/master/docs/CHANGELOG.md">org.checkerframework:checker-qual's">https://github.com/typetools/checker-framework/blob/master/docs/CHANGELOG.md">org.checkerframework:checker-qual's
    changelog</a>.</em></p>
    <blockquote>
    <h2>Version 4.0.0 (2026-04-07)</h2>
    <h3>User-visible changes</h3>
    <p>To run the Checker Framework, you need to use a JDK 17 or later
    version of
    javac. That is, you need to use JDK 17 or later when compiling your
    code.</p>
    <p>The Checker Framework can type-check any Java project, including
    projects that
    compile to Java 8 or 11 bytecodes and run on JRE versions 8 or 11. That
    is,
    your code can run under any release of Java, from Java 8 onward.</p>
    <p>The type qualifiers and utility libraries in
    <code>checker-qual.jar</code> and
    <code>checker-util.jar</code> still use Java 11 bytecode. Thus, they may
    be used in
    projects that run under Java 11 or later.</p>
    <h3>Changes since version 3.0.0</h3>
    <p>Since version 3.0.0, 91 authors have made over 4500 commits and
    closed over 600
    issues.  Thanks to everyone who contributed!</p>
    <p>New checkers include:</p>
    <ul>
    <li>The <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://checkerframework.org/manual/#index-checker">Index" rel="nofollow">https://checkerframework.org/manual/#index-checker">Index
    Checker</a> warns
    about out-of-bounds accesses to arrays and strings.</li>
    <li>The <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://checkerframework.org/manual/#initialized-fields-checker">Initialized" rel="nofollow">https://checkerframework.org/manual/#initialized-fields-checker">Initialized
    Fields
    Checker</a>
    warns if a constructor does not initialize a field.</li>
    <li>The <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://checkerframework.org/manual/#resource-leak-checker">Resource" rel="nofollow">https://checkerframework.org/manual/#resource-leak-checker">Resource
    Leak
    Checker</a>
    guarantees that every resource is closed rather than leaked. Examples of
    resources are a channel, executor, <code>ExecutionControl</code>, file,
    <code>FileLock</code>,
    <code>Formatter</code>, reader, <code>Scanner</code>, socket, stream,
    writer, etc.</li>
    <li>The <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://checkerframework.org/manual/#sql-quotes-checker">SQL" rel="nofollow">https://checkerframework.org/manual/#sql-quotes-checker">SQL
    Quotes
    Checker</a> helps
    prevent SQL injection vulnerabilities.</li>
    </ul>
    <p>New command-line arguments include:</p>
    <ul>
    <li><code>-AskipFiles</code>, <code>-AonlyFiles</code></li>
    <li><code>-AassumeSideEffectFree</code>,
    <code>-AassumeDeterministic</code>, <code>-AassumePure</code>,
    <code>-AassumePureGetters</code></li>
    <li><code>-AuseConservativeDefaultsForUncheckedCode</code></li>
    <li><code>-AignoreRawTypeArguments</code></li>
    <li><code>-AwarnRedundantAnnotations</code></li>
    <li><code>-Ainfer=ajava</code>, <code>-AinferOutputDirectory</code>,
    <code>-AinferOutputOriginal</code>,
    <code>-AshowWpiFailedInferences</code></li>
    <li><code>-AshowSuppressWarningsStrings</code>,
    <code>-AwarnUnneededSuppressionsExceptions</code></li>
    <li><code>-AshowPrefixInWarningMessages</code></li>
    <li><code>-AstubNoWarnIfNotFound</code>, <code>-AstubWarnNote</code>,
    <code>-AmergeStubsWithSource</code></li>
    <li><code>-Aonelinemsg</code>, <code>-AdumpOnErrors</code>,
    <code>-AexceptionLineSeparator</code></li>
    <li><code>-ApermitMissingJdk</code>, <code>-AparseAllJdk</code></li>
    <li><code>-AslowTypecheckingSeconds</code></li>
    </ul>
    <!-- raw HTML omitted -->
    </blockquote>
    <p>... (truncated)</p>
    </details>
    <details>
    <summary>Commits</summary>
    <ul>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/typetools/checker-framework/commit/479d0875daa271447e2822c657896b5f9d02ce24"><code>479d087</code></a">https://github.com/typetools/checker-framework/commit/479d0875daa271447e2822c657896b5f9d02ce24"><code>479d087</code></a>
    new release 4.0.0</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/typetools/checker-framework/commit/bfff75751f4fa4094b7d3015c4b2cfbc2893fbc5"><code>bfff757</code></a">https://github.com/typetools/checker-framework/commit/bfff75751f4fa4094b7d3015c4b2cfbc2893fbc5"><code>bfff757</code></a>
    Put the manual in the right place.</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/typetools/checker-framework/commit/c532f6d12fd5352610f70215f010786e9a2e9924"><code>c532f6d</code></a">https://github.com/typetools/checker-framework/commit/c532f6d12fd5352610f70215f010786e9a2e9924"><code>c532f6d</code></a>
    Put a copy of manual.pdf at top level of website as expected.</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/typetools/checker-framework/commit/5e53e6cfd1e5535623ea260342391037106778ec"><code>5e53e6c</code></a">https://github.com/typetools/checker-framework/commit/5e53e6cfd1e5535623ea260342391037106778ec"><code>5e53e6c</code></a>
    No closed issues.</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/typetools/checker-framework/commit/e67ae858ed36f81ac586fbf42821fa3a483e7f23"><code>e67ae85</code></a">https://github.com/typetools/checker-framework/commit/e67ae858ed36f81ac586fbf42821fa3a483e7f23"><code>e67ae85</code></a>
    Prep for release.</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/typetools/checker-framework/commit/4192d0d88bc272c571a8dd3454d499982cd0ee42"><code>4192d0d</code></a">https://github.com/typetools/checker-framework/commit/4192d0d88bc272c571a8dd3454d499982cd0ee42"><code>4192d0d</code></a>
    Remove file SKIP-REQUIRE-JAVADOC</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/typetools/checker-framework/commit/7d6d85687d2298dbe85d59692ab85d03566a29e7"><code>7d6d856</code></a">https://github.com/typetools/checker-framework/commit/7d6d85687d2298dbe85d59692ab85d03566a29e7"><code>7d6d856</code></a>
    Remove or update references to JDK 8-16</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/typetools/checker-framework/commit/b1e3761bbf0dfb1185d7e8e0b850ef97cafd5ea8"><code>b1e3761</code></a">https://github.com/typetools/checker-framework/commit/b1e3761bbf0dfb1185d7e8e0b850ef97cafd5ea8"><code>b1e3761</code></a>
    Remove all deprecated methods</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/typetools/checker-framework/commit/a1b30642b07d64603a9ec9ef093f910e5be0bf41"><code>a1b3064</code></a">https://github.com/typetools/checker-framework/commit/a1b30642b07d64603a9ec9ef093f910e5be0bf41"><code>a1b3064</code></a>
    Directly use Java 17 and below Javac APIs. (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/typetools/checker-framework/issues/7582">#7582</a>)</li">https://redirect.github.com/typetools/checker-framework/issues/7582">#7582</a>)</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/typetools/checker-framework/commit/4efdbdbbda3ac5230bcae57341098816aa71abfb"><code>4efdbdb</code></a">https://github.com/typetools/checker-framework/commit/4efdbdbbda3ac5230bcae57341098816aa71abfb"><code>4efdbdb</code></a>
    Remove support for Java 8 from scripts and build scripts. (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/typetools/checker-framework/issues/7575">#7575</a>)</li">https://redirect.github.com/typetools/checker-framework/issues/7575">#7575</a>)</li>
    <li>Additional commits viewable in <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/typetools/checker-framework/compare/checker-framework-3.55.1...checker-framework-4.0.0">compare">https://github.com/typetools/checker-framework/compare/checker-framework-3.55.1...checker-framework-4.0.0">compare
    view</a></li>
    </ul>
    </details>
    <br />
    
    Updates `org.checkerframework:checker` from 3.55.1 to 4.0.0
    <details>
    <summary>Release notes</summary>
    <p><em>Sourced from <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/typetools/checker-framework/releases">org.checkerframework:checker's">https://github.com/typetools/checker-framework/releases">org.checkerframework:checker's
    releases</a>.</em></p>
    <blockquote>
    <h2>Release 4.0.0 of the Checker Framework</h2>
    <h2>Version 4.0.0 (2026-04-07)</h2>
    <h3>User-visible changes</h3>
    <p>To run the Checker Framework, you need to use a JDK 17 or later
    version of javac. That is, you need to use JDK 17 or later when
    compiling your code.</p>
    <p>The Checker Framework can type-check any Java project, including
    projects that compile to Java 8 or 11 bytecodes and run on JRE versions
    8 or 11. That is, your code can run under any release of Java, from Java
    8 onward.</p>
    <p>The type qualifiers and utility libraries in
    <code>checker-qual.jar</code> and <code>checker-util.jar</code> still
    use Java 11 bytecode. Thus, they may be used in projects that run under
    Java 11 or later.</p>
    <h3>Changes since version 3.0.0</h3>
    <p>Since version 3.0.0, 91 authors have made over 4500 commits and
    closed over 600 issues. Thanks to everyone who contributed!</p>
    <p>New checkers include:</p>
    <ul>
    <li>The <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://checkerframework.org/manual/#index-checker">Index" rel="nofollow">https://checkerframework.org/manual/#index-checker">Index
    Checker</a> warns about out-of-bounds accesses to arrays and
    strings.</li>
    <li>The <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://checkerframework.org/manual/#initialized-fields-checker">Initialized" rel="nofollow">https://checkerframework.org/manual/#initialized-fields-checker">Initialized
    Fields Checker</a> warns if a constructor does not initialize a
    field.</li>
    <li>The <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://checkerframework.org/manual/#resource-leak-checker">Resource" rel="nofollow">https://checkerframework.org/manual/#resource-leak-checker">Resource
    Leak Checker</a> guarantees that every resource is closed rather than
    leaked. Examples of resources are a channel, executor,
    <code>ExecutionControl</code>, file, <code>FileLock</code>,
    <code>Formatter</code>, reader, <code>Scanner</code>, socket, stream,
    writer, etc.</li>
    <li>The <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://checkerframework.org/manual/#sql-quotes-checker">SQL" rel="nofollow">https://checkerframework.org/manual/#sql-quotes-checker">SQL
    Quotes Checker</a> helps prevent SQL injection vulnerabilities.</li>
    </ul>
    <p>New command-line arguments include:</p>
    <ul>
    <li><code>-AskipFiles</code>, <code>-AonlyFiles</code></li>
    <li><code>-AassumeSideEffectFree</code>,
    <code>-AassumeDeterministic</code>, <code>-AassumePure</code>,
    <code>-AassumePureGetters</code></li>
    <li><code>-AuseConservativeDefaultsForUncheckedCode</code></li>
    <li><code>-AignoreRawTypeArguments</code></li>
    <li><code>-AwarnRedundantAnnotations</code></li>
    <li><code>-Ainfer=ajava</code>, <code>-AinferOutputDirectory</code>,
    <code>-AinferOutputOriginal</code>,
    <code>-AshowWpiFailedInferences</code></li>
    <li><code>-AshowSuppressWarningsStrings</code>,
    <code>-AwarnUnneededSuppressionsExceptions</code></li>
    <li><code>-AshowPrefixInWarningMessages</code></li>
    <li><code>-AstubNoWarnIfNotFound</code>, <code>-AstubWarnNote</code>,
    <code>-AmergeStubsWithSource</code></li>
    <li><code>-Aonelinemsg</code>, <code>-AdumpOnErrors</code>,
    <code>-AexceptionLineSeparator</code></li>
    <li><code>-ApermitMissingJdk</code>, <code>-AparseAllJdk</code></li>
    <li><code>-AslowTypecheckingSeconds</code></li>
    <li><code>-Aversion</code>, <code>-AprintGitProperties</code></li>
    <li>You can pass an option to only a particular checker (not all
    checkers) by using an underscore prefix.</li>
    </ul>
    <p>Other improvements include thousands of enhancements and bug fixes --
    too many to list here.</p>
    <h3>Implementation details</h3>
    <p>All previously-deprecated methods and classes have been removed. If
    your project builds upon the Checker Framework, we suggest that you
    upgrade to version 3.55.1, resolve all the deprecation warnings, then
    upgrade to version 4.0.0.</p>
    </blockquote>
    </details>
    <details>
    <summary>Changelog</summary>
    <p><em>Sourced from <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/typetools/checker-framework/blob/master/docs/CHANGELOG.md">org.checkerframework:checker's">https://github.com/typetools/checker-framework/blob/master/docs/CHANGELOG.md">org.checkerframework:checker's
    changelog</a>.</em></p>
    <blockquote>
    <h2>Version 4.0.0 (2026-04-07)</h2>
    <h3>User-visible changes</h3>
    <p>To run the Checker Framework, you need to use a JDK 17 or later
    version of
    javac. That is, you need to use JDK 17 or later when compiling your
    code.</p>
    <p>The Checker Framework can type-check any Java project, including
    projects that
    compile to Java 8 or 11 bytecodes and run on JRE versions 8 or 11. That
    is,
    your code can run under any release of Java, from Java 8 onward.</p>
    <p>The type qualifiers and utility libraries in
    <code>checker-qual.jar</code> and
    <code>checker-util.jar</code> still use Java 11 bytecode. Thus, they may
    be used in
    projects that run under Java 11 or later.</p>
    <h3>Changes since version 3.0.0</h3>
    <p>Since version 3.0.0, 91 authors have made over 4500 commits and
    closed over 600
    issues.  Thanks to everyone who contributed!</p>
    <p>New checkers include:</p>
    <ul>
    <li>The <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://checkerframework.org/manual/#index-checker">Index" rel="nofollow">https://checkerframework.org/manual/#index-checker">Index
    Checker</a> warns
    about out-of-bounds accesses to arrays and strings.</li>
    <li>The <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://checkerframework.org/manual/#initialized-fields-checker">Initialized" rel="nofollow">https://checkerframework.org/manual/#initialized-fields-checker">Initialized
    Fields
    Checker</a>
    warns if a constructor does not initialize a field.</li>
    <li>The <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://checkerframework.org/manual/#resource-leak-checker">Resource" rel="nofollow">https://checkerframework.org/manual/#resource-leak-checker">Resource
    Leak
    Checker</a>
    guarantees that every resource is closed rather than leaked. Examples of
    resources are a channel, executor, <code>ExecutionControl</code>, file,
    <code>FileLock</code>,
    <code>Formatter</code>, reader, <code>Scanner</code>, socket, stream,
    writer, etc.</li>
    <li>The <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://checkerframework.org/manual/#sql-quotes-checker">SQL" rel="nofollow">https://checkerframework.org/manual/#sql-quotes-checker">SQL
    Quotes
    Checker</a> helps
    prevent SQL injection vulnerabilities.</li>
    </ul>
    <p>New command-line arguments include:</p>
    <ul>
    <li><code>-AskipFiles</code>, <code>-AonlyFiles</code></li>
    <li><code>-AassumeSideEffectFree</code>,
    <code>-AassumeDeterministic</code>, <code>-AassumePure</code>,
    <code>-AassumePureGetters</code></li>
    <li><code>-AuseConservativeDefaultsForUncheckedCode</code></li>
    <li><code>-AignoreRawTypeArguments</code></li>
    <li><code>-AwarnRedundantAnnotations</code></li>
    <li><code>-Ainfer=ajava</code>, <code>-AinferOutputDirectory</code>,
    <code>-AinferOutputOriginal</code>,
    <code>-AshowWpiFailedInferences</code></li>
    <li><code>-AshowSuppressWarningsStrings</code>,
    <code>-AwarnUnneededSuppressionsExceptions</code></li>
    <li><code>-AshowPrefixInWarningMessages</code></li>
    <li><code>-AstubNoWarnIfNotFound</code>, <code>-AstubWarnNote</code>,
    <code>-AmergeStubsWithSource</code></li>
    <li><code>-Aonelinemsg</code>, <code>-AdumpOnErrors</code>,
    <code>-AexceptionLineSeparator</code></li>
    <li><code>-ApermitMissingJdk</code>, <code>-AparseAllJdk</code></li>
    <li><code>-AslowTypecheckingSeconds</code></li>
    </ul>
    <!-- raw HTML omitted -->
    </blockquote>
    <p>... (truncated)</p>
    </details>
    <details>
    <summary>Commits</summary>
    <ul>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/typetools/checker-framework/commit/479d0875daa271447e2822c657896b5f9d02ce24"><code>479d087</code></a">https://github.com/typetools/checker-framework/commit/479d0875daa271447e2822c657896b5f9d02ce24"><code>479d087</code></a>
    new release 4.0.0</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/typetools/checker-framework/commit/bfff75751f4fa4094b7d3015c4b2cfbc2893fbc5"><code>bfff757</code></a">https://github.com/typetools/checker-framework/commit/bfff75751f4fa4094b7d3015c4b2cfbc2893fbc5"><code>bfff757</code></a>
    Put the manual in the right place.</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/typetools/checker-framework/commit/c532f6d12fd5352610f70215f010786e9a2e9924"><code>c532f6d</code></a">https://github.com/typetools/checker-framework/commit/c532f6d12fd5352610f70215f010786e9a2e9924"><code>c532f6d</code></a>
    Put a copy of manual.pdf at top level of website as expected.</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/typetools/checker-framework/commit/5e53e6cfd1e5535623ea260342391037106778ec"><code>5e53e6c</code></a">https://github.com/typetools/checker-framework/commit/5e53e6cfd1e5535623ea260342391037106778ec"><code>5e53e6c</code></a>
    No closed issues.</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/typetools/checker-framework/commit/e67ae858ed36f81ac586fbf42821fa3a483e7f23"><code>e67ae85</code></a">https://github.com/typetools/checker-framework/commit/e67ae858ed36f81ac586fbf42821fa3a483e7f23"><code>e67ae85</code></a>
    Prep for release.</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/typetools/checker-framework/commit/4192d0d88bc272c571a8dd3454d499982cd0ee42"><code>4192d0d</code></a">https://github.com/typetools/checker-framework/commit/4192d0d88bc272c571a8dd3454d499982cd0ee42"><code>4192d0d</code></a>
    Remove file SKIP-REQUIRE-JAVADOC</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/typetools/checker-framework/commit/7d6d85687d2298dbe85d59692ab85d03566a29e7"><code>7d6d856</code></a">https://github.com/typetools/checker-framework/commit/7d6d85687d2298dbe85d59692ab85d03566a29e7"><code>7d6d856</code></a>
    Remove or update references to JDK 8-16</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/typetools/checker-framework/commit/b1e3761bbf0dfb1185d7e8e0b850ef97cafd5ea8"><code>b1e3761</code></a">https://github.com/typetools/checker-framework/commit/b1e3761bbf0dfb1185d7e8e0b850ef97cafd5ea8"><code>b1e3761</code></a>
    Remove all deprecated methods</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/typetools/checker-framework/commit/a1b30642b07d64603a9ec9ef093f910e5be0bf41"><code>a1b3064</code></a">https://github.com/typetools/checker-framework/commit/a1b30642b07d64603a9ec9ef093f910e5be0bf41"><code>a1b3064</code></a>
    Directly use Java 17 and below Javac APIs. (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/typetools/checker-framework/issues/7582">#7582</a>)</li">https://redirect.github.com/typetools/checker-framework/issues/7582">#7582</a>)</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/typetools/checker-framework/commit/4efdbdbbda3ac5230bcae57341098816aa71abfb"><code>4efdbdb</code></a">https://github.com/typetools/checker-framework/commit/4efdbdbbda3ac5230bcae57341098816aa71abfb"><code>4efdbdb</code></a>
    Remove support for Java 8 from scripts and build scripts. (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/typetools/checker-framework/issues/7575">#7575</a>)</li">https://redirect.github.com/typetools/checker-framework/issues/7575">#7575</a>)</li>
    <li>Additional commits viewable in <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/typetools/checker-framework/compare/checker-framework-3.55.1...checker-framework-4.0.0">compare">https://github.com/typetools/checker-framework/compare/checker-framework-3.55.1...checker-framework-4.0.0">compare
    view</a></li>
    </ul>
    </details>
    <br />
    
    
    Dependabot will resolve any conflicts with this PR as long as you don't
    alter it yourself. You can also trigger a rebase manually by commenting
    `@dependabot rebase`.
    
    [//]: # (dependabot-automerge-start)
    [//]: # (dependabot-automerge-end)
    
    ---
    
    <details>
    <summary>Dependabot commands and options</summary>
    <br />
    
    You can trigger Dependabot actions by commenting on this PR:
    - `@dependabot rebase` will rebase this PR
    - `@dependabot recreate` will recreate this PR, overwriting any edits
    that have been made to it
    - `@dependabot show <dependency name> ignore conditions` will show all
    of the ignore conditions of the specified dependency
    - `@dependabot ignore this major version` will close this PR and stop
    Dependabot creating any more for this major version (unless you reopen
    the PR or upgrade to it yourself)
    - `@dependabot ignore this minor version` will close this PR and stop
    Dependabot creating any more for this minor version (unless you reopen
    the PR or upgrade to it yourself)
    - `@dependabot ignore this dependency` will close this PR and stop
    Dependabot creating any more for this dependency (unless you reopen the
    PR or upgrade to it yourself)
    
    
    </details>
    
    Signed-off-by: dependabot[bot] <support@github.com>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] authored Apr 27, 2026
    Configuration menu
    Copy the full SHA
    09038fb View commit details
    Browse the repository at this point in the history
  2. MINOR: Bump io.grpc:grpc-bom from 1.79.0 to 1.80.0 (apache#1093)

    Bumps [io.grpc:grpc-bom](https://github.com/grpc/grpc-java) from 1.79.0
    to 1.80.0.
    <details>
    <summary>Release notes</summary>
    <p><em>Sourced from <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/grpc/grpc-java/releases">io.grpc:grpc-bom's">https://github.com/grpc/grpc-java/releases">io.grpc:grpc-bom's
    releases</a>.</em></p>
    <blockquote>
    <h2>V1.80.0</h2>
    <p><strong>API Changes</strong></p>
    <ul>
    <li>core: Added PickResult.copyWithSubchannel() and
    PickResult.copyWithStreamTracerFactory() to simplify updating PickResult
    while preserving metadata. Load balancing policies should now ensure
    ForwardingSubchannel decorators are unwrapped before being returned in a
    pick result. (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/grpc/grpc-java/issues/12658">#12658</a">https://redirect.github.com/grpc/grpc-java/issues/12658">#12658</a>)
    (eae16b251)</li>
    </ul>
    <p><strong>Bug Fixes</strong></p>
    <ul>
    <li>core: Fixed the retry backoff jitter range to [0.8, 1.2] to align
    with the gRPC A6 specification. Retries will now occur more consistently
    around the calculated backoff interval. (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/grpc/grpc-java/issues/12639">#12639</a">https://redirect.github.com/grpc/grpc-java/issues/12639">#12639</a>)
    (024fdd0ea)
    core: Fixed a race condition in RetriableStream where inFlightSubStreams
    counting could become inconsistent during concurrent retry and deadline
    events. This ensures that client calls (such as blockingUnaryCall) do
    not hang indefinitely and correctly receive a close signal. (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/grpc/grpc-java/issues/12649">#12649</a">https://redirect.github.com/grpc/grpc-java/issues/12649">#12649</a>)
    (73abb4854)</li>
    </ul>
    <p><strong>Improvements</strong></p>
    <ul>
    <li>api: Trigger R8's ServiceLoader optimization to reduce necessary
    configuration when using R8 Full Mode (470219f9c). This allows gRPC to
    avoid reflection, and the need to specify -keeps for various class’s
    constructors.
    Upgrade to protobuf 33.4 (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/grpc/grpc-java/issues/12615">#12615</a">https://redirect.github.com/grpc/grpc-java/issues/12615">#12615</a>)
    (50c18f183)</li>
    <li>cronet: Introduced CRONET_READ_BUFFER_SIZE_KEY to allow customizing
    the read buffer size per-stream via CallOptions. Increasing the buffer
    size from the 4KB default can significantly improve performance for
    large messages by reducing JNI and context-switching overhead.
    (31fdb6c22)</li>
    <li>api: Moved FlagResetRule to api/testFixtures and updated
    ManagedChannelRegistry to honor the GRPC_ENABLE_RFC3986_URIS feature
    flag. This ensures that target parsing is consistent across the library
    when the new URI parser is enabled. (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/grpc/grpc-java/issues/12608">#12608</a>)</li">https://redirect.github.com/grpc/grpc-java/issues/12608">#12608</a>)</li>
    <li>api: Updated NameResolverRegistry to natively support io.grpc.Uri.
    This is a foundational change that allows gRPC's name resolution system
    to handle URIs parsed with the new RFC 3986-compliant parser, ensuring
    more robust target handling. (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/grpc/grpc-java/issues/12609">#12609</a">https://redirect.github.com/grpc/grpc-java/issues/12609">#12609</a>)
    (990348876)</li>
    <li>xds: Removed the GRPC_EXPERIMENTAL_XDS_SNI feature flag. SNI
    determination via xDS is now always enabled and follows gRFC A101, where
    SNI is derived from xDS configurations like auto_host_sni or
    UpstreamTlsContext.sni. This ensures that no SNI is sent if not
    explicitly configured, unless the legacy channel authority fallback is
    enabled. (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/grpc/grpc-java/issues/12625">#12625</a">https://redirect.github.com/grpc/grpc-java/issues/12625">#12625</a>)
    (ac44e9681)</li>
    </ul>
    <p><strong>New Features</strong></p>
    <ul>
    <li>core: pick_first shuffling now a weighted shuffle and observes
    weights from EDS (34dd29042). This finishes the <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/grpc/proposal/blob/master/A113-pick-first-weighted-shuffling.md">gRFC">https://github.com/grpc/proposal/blob/master/A113-pick-first-weighted-shuffling.md">gRFC
    A113 pick_first: Weighted Random Shuffling</a> support</li>
    <li>netty: Added RFC 3986 support to the unix: name resolver. This
    enables proper parsing of Unix domain socket URIs, including correct
    handling of query and fragment components in both hierarchical (e.g.,
    unix:///path) and opaque (e.g., unix:/path) formats. (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/grpc/grpc-java/issues/12659">#12659</a>)</li">https://redirect.github.com/grpc/grpc-java/issues/12659">#12659</a>)</li>
    </ul>
    <p><strong>Thanks to</strong></p>
    <ul>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/becomeStar"><code>@​becomeStar</code></a></li">https://github.com/becomeStar"><code>@​becomeStar</code></a></li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/aymanm-google"><code>@​aymanm-google</code></a></li">https://github.com/aymanm-google"><code>@​aymanm-google</code></a></li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/PetitBaguette"><code>@​PetitBaguette</code></a></li">https://github.com/PetitBaguette"><code>@​PetitBaguette</code></a></li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/stagegrowth"><code>@​stagegrowth</code></a></li">https://github.com/stagegrowth"><code>@​stagegrowth</code></a></li>
    <li><a href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/wcchoi"><code>@​wcchoi</code></a></li">https://github.com/wcchoi"><code>@​wcchoi</code></a></li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/Gyuhyeok99"><code>@​Gyuhyeok99</code></a></li">https://github.com/Gyuhyeok99"><code>@​Gyuhyeok99</code></a></li>
    </ul>
    </blockquote>
    </details>
    <details>
    <summary>Commits</summary>
    <ul>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/grpc/grpc-java/commit/6c231b4c534d887bc6407f8af52733d996f19819"><code>6c231b4</code></a">https://github.com/grpc/grpc-java/commit/6c231b4c534d887bc6407f8af52733d996f19819"><code>6c231b4</code></a>
    Bump version to 1.80.0</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/grpc/grpc-java/commit/daf7a6c3c0496dce3f9d9c26aeae2479a3a4d7de"><code>daf7a6c</code></a">https://github.com/grpc/grpc-java/commit/daf7a6c3c0496dce3f9d9c26aeae2479a3a4d7de"><code>daf7a6c</code></a>
    Update README etc to reference 1.80.0</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/grpc/grpc-java/commit/b7f9074e23fa543e9a804e20df8a8a656feb39ea"><code>b7f9074</code></a">https://github.com/grpc/grpc-java/commit/b7f9074e23fa543e9a804e20df8a8a656feb39ea"><code>b7f9074</code></a>
    Revert &quot;fix(xds): Allow and normalize trailing dot (FQDN) in
    matchHostName (#...</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/grpc/grpc-java/commit/09a6e2ef6ebdbee4d3980d5ac6bd3e3e1c2d9755"><code>09a6e2e</code></a">https://github.com/grpc/grpc-java/commit/09a6e2ef6ebdbee4d3980d5ac6bd3e3e1c2d9755"><code>09a6e2e</code></a>
    Revert &quot;netty: Preserve early server handshake failure cause in
    logs&quot;</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/grpc/grpc-java/commit/31fdb6c2268b4b1c8ba6c995ee46c58e84a831aa"><code>31fdb6c</code></a">https://github.com/grpc/grpc-java/commit/31fdb6c2268b4b1c8ba6c995ee46c58e84a831aa"><code>31fdb6c</code></a>
    Add <code>CRONET_READ_BUFFER_SIZE_KEY</code> API to
    CronetClientStream</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/grpc/grpc-java/commit/470219f9ca330887215d3192f72095aa844d84fb"><code>470219f</code></a">https://github.com/grpc/grpc-java/commit/470219f9ca330887215d3192f72095aa844d84fb"><code>470219f</code></a>
    Trigger R8's ServiceLoader optimization</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/grpc/grpc-java/commit/50ead96f4718569782cc7a3f694c9aa755722bac"><code>50ead96</code></a">https://github.com/grpc/grpc-java/commit/50ead96f4718569782cc7a3f694c9aa755722bac"><code>50ead96</code></a>
    netty: Preserve early server handshake failure cause in logs</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/grpc/grpc-java/commit/eae16b2517e294cde94c2a8b1171c0131fa7991a"><code>eae16b2</code></a">https://github.com/grpc/grpc-java/commit/eae16b2517e294cde94c2a8b1171c0131fa7991a"><code>eae16b2</code></a>
    unwrap ForwardingSubchannel during Picks (<a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/grpc/grpc-java/issues/12658">#12658</a>)</li">https://redirect.github.com/grpc/grpc-java/issues/12658">#12658</a>)</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/grpc/grpc-java/commit/d9320eea62534e8a87319c1124a3a0f8443e43a8"><code>d9320ee</code></a">https://github.com/grpc/grpc-java/commit/d9320eea62534e8a87319c1124a3a0f8443e43a8"><code>d9320ee</code></a>
    netty: Add RFC 3986 support to the 'unix:' name resolver.</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/grpc/grpc-java/commit/d5536b34b26788993c9b0ae4212f22a35a9ecf3c"><code>d5536b3</code></a">https://github.com/grpc/grpc-java/commit/d5536b34b26788993c9b0ae4212f22a35a9ecf3c"><code>d5536b3</code></a>
    netty: factor out some duplicated code into a helper method</li>
    <li>Additional commits viewable in <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fquantcast%2Farrow-java%2Fcompare%2F%3Ca+href%3D"https://github.com/grpc/grpc-java/compare/v1.79.0...v1.80.0">compare">https://github.com/grpc/grpc-java/compare/v1.79.0...v1.80.0">compare
    view</a></li>
    </ul>
    </details>
    <br />
    
    Signed-off-by: dependabot[bot] <support@github.com>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] authored Apr 27, 2026
    Configuration menu
    Copy the full SHA
    0f0a584 View commit details
    Browse the repository at this point in the history
Loading