Skip to content

ci(deps): bump the maven-dependencies group across 1 directory with 33 updates - #2558

Merged
thjaeckle merged 3 commits into
masterfrom
dependabot/maven/bom/maven-dependencies-762555d3db
Sep 21, 2026
Merged

ci(deps): bump the maven-dependencies group across 1 directory with 33 updates#2558
thjaeckle merged 3 commits into
masterfrom
dependabot/maven/bom/maven-dependencies-762555d3db

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 10, 2026

Copy link
Copy Markdown
Contributor

Bumps the maven-dependencies group with 33 updates in the /bom directory:

Package From To
com.fasterxml.jackson:jackson-bom 2.22.0 2.22.2
com.networknt:json-schema-validator 2.0.3 3.0.7
org.apache.pekko:pekko-serialization-jackson_2.13 1.6.0 1.7.0
org.apache.pekko:pekko-bom_2.13 1.6.0 1.7.0
org.apache.pekko:pekko-remote_2.13 1.6.0 1.7.0
org.apache.pekko:pekko-connectors-kafka_2.13 1.1.0 1.2.0
org.apache.pekko:pekko-connectors-kafka-testkit_2.13 1.1.0 1.2.0
org.apache.kafka:kafka-clients 3.9.2 4.3.1
org.apache.pekko:pekko-http-bom_2.13 1.3.0 1.4.0
org.mongodb.scala:mongo-scala-driver_2.13 5.6.5 5.11.0
org.mongodb:bson 5.6.5 5.11.0
org.mongodb:mongodb-driver-core 5.6.5 5.11.0
org.mongodb:mongodb-driver-reactivestreams 5.6.5 5.11.0
io.cloudevents:cloudevents-http-basic 2.5.0 5.0.0
org.apache.qpid:qpid-jms-client 1.16.0 2.11.0
com.rabbitmq:amqp-client 5.33.1 5.35.0
com.hivemq:hivemq-mqtt-client 1.3.15 1.4.0
org.apache.sshd:sshd-core 2.18.0 2.19.0
at.yawk.lz4:lz4-java 1.11.1 1.11.2
ch.qos.logback:logback-core 1.5.35 1.6.3
ch.qos.logback:logback-classic 1.5.35 1.6.3
net.logstash.logback:logstash-logback-encoder 8.1 9.0
com.github.oshi:oshi-core 6.12.0 7.6.1
org.webjars.npm:long 3.2.0 5.3.2
software.amazon.awssdk:sts 2.54.9 2.54.11
software.amazon.awssdk:auth 2.54.9 2.54.11
org.junit.jupiter:junit-jupiter-engine 5.14.4 6.1.3
org.junit.jupiter:junit-jupiter-params 5.14.4 6.1.3
org.junit.vintage:junit-vintage-engine 5.14.4 6.1.3
nl.jqno.equalsverifier:equalsverifier 4.5 4.5.2
net.bytebuddy:byte-buddy 1.17.6 1.18.13
io.github.classgraph:classgraph 4.8.126 4.8.194
de.flapdoodle.embed:de.flapdoodle.embed.mongo 4.20.0 5.0.0

Updates com.fasterxml.jackson:jackson-bom from 2.22.0 to 2.22.2

Commits
  • 062d76d [maven-release-plugin] prepare release jackson-bom-2.22.2
  • dcf18f7 Prep for 2.22.2 release
  • 9688c7b Merge branch '2.21' into 2.22
  • 7796a7d Merge branch '2.20' into 2.21
  • d3cd7fc Merge branch '2.19' into 2.20
  • 7a28068 Merge branch '2.18' into 2.19
  • 51eb465 Post-release dep version bump
  • 34ff5e8 [maven-release-plugin] prepare for next development iteration
  • 0b44a45 [maven-release-plugin] prepare release jackson-bom-2.18.10
  • 691ec93 Prep for 2.18.10 release
  • Additional commits viewable in compare view

Updates com.networknt:json-schema-validator from 2.0.3 to 3.0.7

Release notes

Sourced from com.networknt:json-schema-validator's releases.

3.0.7- 2026-08-20

Added

Changed

3.0.6- 2026-07-07

Added

Changed

3.0.5- 2026-06-21

Added

Changed

  • fixes #1252 problem with additionalProperties schema in jsconfig schema (#1253)
  • fixes #1174 TextNodes as schema seem to validate any value (#1250)

3.0.4- 2026-06-10

Added

Changed

3.0.3- 2026-05-27

Added

Changed

3.0.2- 2026-04-14

Added

... (truncated)

Changelog

Sourced from com.networknt:json-schema-validator's changelog.

Change Log

All notable changes to this project will be documented in this file.

This format is based on Keep a Changelog.

This project does not adhere to Semantic Versioning and minor version changes can have incompatible API changes. These incompatible API changes will largely affect those who have custom validator or walker implementations. Those who just use the library to validate using the standard JSON Schema Draft specifications may not need changes.

[Unreleased]

Added

Changed

3.0.7- 2026-08-20

Added

Changed

3.0.6- 2026-07-07

Added

Changed

3.0.5- 2026-06-21

Added

Changed

  • fixes #1252 problem with additionalProperties schema in jsconfig schema (#1253)
  • fixes #1174 TextNodes as schema seem to validate any value (#1250)

3.0.4- 2026-06-10

Added

... (truncated)

Commits

Updates org.apache.pekko:pekko-serialization-jackson_2.13 from 1.6.0 to 1.7.0

Commits

Updates org.apache.pekko:pekko-bom_2.13 from 1.6.0 to 1.7.0

Commits

Updates org.apache.pekko:pekko-remote_2.13 from 1.6.0 to 1.7.0

Commits

Updates org.apache.pekko:pekko-bom_2.13 from 1.6.0 to 1.7.0

Commits

Updates org.apache.pekko:pekko-connectors-kafka_2.13 from 1.1.0 to 1.2.0

Commits
  • 16823b6 Add workflow for staging release candidates (1.2.x) (#637)
  • 45524f4 Update kafkaVersion from 3.9.1 to 3.9.2 (#636)
  • d108ba4 Clear lastRevoked after use to avoid wiping buffers under cooperative rebalan...
  • 6f20daf Update sbt-license-report to 1.8.0
  • 2244132 fix imports
  • 04391eb Update sbt-header to 5.11.0
  • de1e76e Update sbt, scripted-plugin to 1.11.6 (#357)
  • 3e629bb protect 1.1.x branch (#350)
  • 1a0388a support allowing to test with confluent v7 and v8 docker images (#332)
  • 3fcf6db Update sbt, scripted-plugin to 1.11.5 (#354)
  • Additional commits viewable in compare view

Updates org.apache.pekko:pekko-connectors-kafka-testkit_2.13 from 1.1.0 to 1.2.0

Commits
  • 16823b6 Add workflow for staging release candidates (1.2.x) (#637)
  • 45524f4 Update kafkaVersion from 3.9.1 to 3.9.2 (#636)
  • d108ba4 Clear lastRevoked after use to avoid wiping buffers under cooperative rebalan...
  • 6f20daf Update sbt-license-report to 1.8.0
  • 2244132 fix imports
  • 04391eb Update sbt-header to 5.11.0
  • de1e76e Update sbt, scripted-plugin to 1.11.6 (#357)
  • 3e629bb protect 1.1.x branch (#350)
  • 1a0388a support allowing to test with confluent v7 and v8 docker images (#332)
  • 3fcf6db Update sbt, scripted-plugin to 1.11.5 (#354)
  • Additional commits viewable in compare view

Updates org.apache.kafka:kafka-clients from 3.9.2 to 4.3.1

Updates org.apache.pekko:pekko-remote_2.13 from 1.6.0 to 1.7.0

Commits

Updates org.apache.pekko:pekko-http-bom_2.13 from 1.3.0 to 1.4.0

Commits

Updates org.mongodb.scala:mongo-scala-driver_2.13 from 5.6.5 to 5.11.0

Release notes

Sourced from org.mongodb.scala:mongo-scala-driver_2.13's releases.

Java Driver 5.11.0 (August 28, 2026)

What's Changed

CSFLE/QE Http proxies notes

  • The driver always negotiates TLS with the KMS host itself, using the SSLContext configured for the KMS provider. Implementations must not negotiate TLS with the KMS host; doing so would let an intermediary read the key material in transit.
  • An implementation may use TLS for its own connection to the intermediary, in which case it returns an SSLSocket and the driver layers the KMS host's TLS session on top of it.
  • Ownership of the returned socket passes to the driver, which closes it when the KMS request completes. A socket that is never returned must be closed by the implementation.
  • Applicable only to the synchronous driver. The reactive streams driver rejects(RuntimeException) a configured callback.

Code example

Code example uses only the JDK API , so no HTTP client dependency is required. If you use your own HTTP client, it must return the tunnelled socket without negotiating TLS with the KMS host

First define the callback

private static final String PROXY_HOST = "proxy.example.com";
private static final int PROXY_PORT = 8080;
private static final int TIMEOUT_MILLIS = 10_000;

// Routes every KMS request through an HTTP proxy using the HTTP CONNECT method

// refer to the docs https://www.rfc-editor.org/info/rfc9110/#section-9.3.6

KmsConnectCallback proxyCallback = context -> {

Socket socket = new Socket();

try {

// 1. Connect to the proxy, not to the KMS host.

socket.connect(new InetSocketAddress(PROXY_HOST, PROXY_PORT), TIMEOUT_MILLIS);

socket.setSoTimeout(TIMEOUT_MILLIS);


    // 2. Ask the proxy to open a tunnel to the KMS host the driver wants to reach. Only the
    //    driver knows which host that is, so always take it from the context rather than
    //    hard-coding it.
    String target = context.getHost() + ":" + context.getPort();
    String connectRequest = "CONNECT " + target + " HTTP/1.1\r\n"
            + "Host: " + target + "\r\n"
            // If the proxy requires authentication, add the appropriate header, for example:
            // + "Proxy-Authorization: Basic " + base64("user:password") + "\r\n"
            + "\r\n";
    socket.getOutputStream().write(connectRequest.getBytes(StandardCharsets.US_ASCII));

// 3. Check the proxy accepted the tunnel before handing the socket back.
checkProxyAcceptedTunnel(socket.getInputStream());



} catch (IOException | RuntimeException e) {

// The driver never received this socket, so it cannot close it for you.

socket.close();

throw e;




</tr></table>

... (truncated)

Commits

Updates org.mongodb:bson from 5.6.5 to 5.11.0

Release notes

Sourced from org.mongodb:bson's releases.

Java Driver 5.11.0 (August 28, 2026)

What's Changed

CSFLE/QE Http proxies notes

  • The driver always negotiates TLS with the KMS host itself, using the SSLContext configured for the KMS provider. Implementations must not negotiate TLS with the KMS host; doing so would let an intermediary read the key material in transit.
  • An implementation may use TLS for its own connection to the intermediary, in which case it returns an SSLSocket and the driver layers the KMS host's TLS session on top of it.
  • Ownership of the returned socket passes to the driver, which closes it when the KMS request completes. A socket that is never returned must be closed by the implementation.
  • Applicable only to the synchronous driver. The reactive streams driver rejects(RuntimeException) a configured callback.

Code example

Code example uses only the JDK API , so no HTTP client dependency is required. If you use your own HTTP client, it must return the tunnelled socket without negotiating TLS with the KMS host

First define the callback

private static final String PROXY_HOST = "proxy.example.com";
private static final int PROXY_PORT = 8080;
private static final int TIMEOUT_MILLIS = 10_000;

// Routes every KMS request through an HTTP proxy using the HTTP CONNECT method

// refer to the docs https://www.rfc-editor.org/info/rfc9110/#section-9.3.6

KmsConnectCallback proxyCallback = context -> {

Socket socket = new Socket();

try {

// 1. Connect to the proxy, not to the KMS host.

socket.connect(new InetSocketAddress(PROXY_HOST, PROXY_PORT), TIMEOUT_MILLIS);

socket.setSoTimeout(TIMEOUT_MILLIS);


    // 2. Ask the proxy to open a tunnel to the KMS host the driver wants to reach. Only the
    //    driver knows which host that is, so always take it from the context rather than
    //    hard-coding it.
    String target = context.getHost() + &quot;:&quot; + context.getPort();
    String connectRequest = &quot;CONNECT &quot; + target + &quot; HTTP/1.1\r\n&quot;
            + &quot;Host: &quot; + target + &quot;\r\n&quot;
            // If the proxy requires authentication, add the appropriate header, for example:
            // + &quot;Proxy-Authorization: Basic &quot; + base64(&quot;user:password&quot;) + &quot;\r\n&quot;
            + &quot;\r\n&quot;;
    socket.getOutputStream().write(connectRequest.getBytes(StandardCharsets.US_ASCII));

// 3. Check the proxy accepted the tunnel before handing the socket back.
checkProxyAcceptedTunnel(socket.getInputStream());



} catch (IOException | RuntimeException e) {

// The driver never received this socket, so it cannot close it for you.

socket.close();

throw e;




</tr></table>

... (truncated)

Commits

Updates org.mongodb:mongodb-driver-core from 5.6.5 to 5.11.0

Release notes

Sourced from org.mongodb:mongodb-driver-core's releases.

Java Driver 5.11.0 (August 28, 2026)

What's Changed

CSFLE/QE Http proxies notes

  • The driver always negotiates TLS with the KMS host itself, using the SSLContext configured for the KMS provider. Implementations must not negotiate TLS with the KMS host; doing so would let an intermediary read the key material in transit.
  • An implementation may use TLS for its own connection to the intermediary, in which case it returns an SSLSocket and the driver layers the KMS host's TLS session on top of it.
  • Ownership of the returned socket passes to the driver, which closes it when the KMS request completes. A socket that is never returned must be closed by the implementation.
  • Applicable only to the synchronous driver. The reactive streams driver rejects(RuntimeException) a configured callback.

Code example

Code example uses only the JDK API , so no HTTP client dependency is required. If you use your own HTTP client, it must return the tunnelled socket without negotiating TLS with the KMS host

First define the callback

private static final String PROXY_HOST = "proxy.example.com";
private static final int PROXY_PORT = 8080;
private static final int TIMEOUT_MILLIS = 10_000;

// Routes every KMS request through an HTTP proxy using the HTTP CONNECT method

// refer to the docs https://www.rfc-editor.org/info/rfc9110/#section-9.3.6

KmsConnectCallback proxyCallback = context -> {

Socket socket = new Socket();

try {

// 1. Connect to the proxy, not to the KMS host.

socket.connect(new InetSocketAddress(PROXY_HOST, PROXY_PORT), TIMEOUT_MILLIS);

socket.setSoTimeout(TIMEOUT_MILLIS);


    // 2. Ask the proxy to open a tunnel to the KMS host the driver wants to reach. Only the
    //    driver knows which host that is, so always take it from the context rather than
    //    hard-coding it.
    String target = context.getHost() + &quot;:&quot; + context.getPort();
    String connectRequest = &quot;CONNECT &quot; + target + &quot; HTTP/1.1\r\n&quot;
            + &quot;Host: &quot; + target + &quot;\r\n&quot;
            // If the proxy requires authentication, add the appropriate header, for example:
            // + &quot;Proxy-Authorization: Basic &quot; + base64(&quot;user:password&quot;) + &quot;\r\n&quot;
            + &quot;\r\n&quot;;
    socket.getOutputStream().write(connectRequest.getBytes(StandardCharsets.US_ASCII));

// 3. Check the proxy accepted the tunnel before handing the socket back.
checkProxyAcceptedTunnel(socket.getInputStream());



} catch (IOException | RuntimeException e) {

// The driver never received this socket, so it cannot close it for you.

socket.close();

throw e;




</tr></table>

... (truncated)

Commits

Updates org.mongodb:mongodb-driver-reactivestreams from 5.6.5 to 5.11.0

Release notes

Sourced from org.mongodb:mongodb-driver-reactivestreams's releases.

Java Driver 5.11.0 (August 28, 2026)

What's Changed

CSFLE/QE Http proxies notes

  • The driver always negotiates TLS with the KMS host itself, using the SSLContext configured for the KMS provider. Implementations must not negotiate TLS with the KMS host; doing so would let an intermediary read the key material in transit.
  • An implementation may use TLS for its own connection to the intermediary, in which case it returns an SSLSocket and the driver layers the KMS host's TLS session on top of it.
  • Ownership of the returned socket passes to the driver, which closes it when the KMS request completes. A socket that is never returned must be closed by the implementation.
  • Applicable only to the synchronous driver. The reactive streams driver rejects(RuntimeException) a configured callback.

Code example

Code example uses only the JDK API , so no HTTP client dependency is required. If you use your own HTTP client, it must return the tunnelled socket without negotiating TLS with the KMS host

First define the callback

private static final String PROXY_HOST = "proxy.example.com";
private static final int PROXY_PORT = 8080;
private static final int TIMEOUT_MILLIS = 10_000;

// Routes every KMS request through an HTTP proxy using the HTTP CONNECT method

// refer to the docs https://www.rfc-editor.org/info/rfc9110/#section-9.3.6

KmsConnectCallback proxyCallback = context -> {

Socket socket = new Socket();

try {

// 1. Connect to the proxy, not to the KMS host.

socket.connect(new InetSocketAddress(PROXY_HOST, PROXY_PORT), TIMEOUT_MILLIS);

socket.setSoTimeout(TIMEOUT_MILLIS);


    // 2. Ask the proxy to open a tunnel to the KMS host the driver wants to reach. Only the
    //    driver knows which host that is, so always take it from the context rather than
    //    hard-coding it.
    String target = context.getHost() + &quot;:&quot; + context.getPort();
    String connectRequest = &quot;CONNECT &quot; + target + &quot; HTTP/1.1\r\n&quot;
            + &quot;Host: &quot; + target + &quot;\r\n&quot;
            // If the proxy requires authentication, add the appropriate header, for example:
            // + &quot;Proxy-Authorization: Basic &quot; + base64(&quot;user:password&quot;) + &quot;\r\n&quot;
            + &quot;\r\n&quot;;
    socket.getOutputStream().write(connectRequest.getBytes(StandardCharsets.US_ASCII));

// 3. Check the proxy accepted the tunnel before handing the socket back.
checkProxyAcceptedTunnel(socket.getInputStream());



} catch (IOException | RuntimeException e) {

// The driver never received this socket, so it cannot close it for you.

socket.close();

throw e;




</tr></table>

... (truncated)

Commits

Updates org.mongodb:bson from 5.6.5 to 5.11.0

Release notes

Sourced from org.mongodb:bson's releases.

Java Driver 5.11.0 (August 28, 2026)

What's Changed

CSFLE/QE Http proxies notes

  • The driver always negotiates TLS with the KMS host itself, using the Description has been truncated

@dependabot
ci(deps): bump the maven-dependencies group across 1 directory with 3…
4b0b1e9 
…3 updates

Bumps the maven-dependencies group with 33 updates in the /bom directory:

| Package | From | To |
| --- | --- | --- |
| [com.fasterxml.jackson:jackson-bom](https://github.com/FasterXML/jackson-bom) | `2.22.0` | `2.22.2` |
| [com.networknt:json-schema-validator](https://github.com/networknt/json-schema-validator) | `2.0.3` | `3.0.7` |
| [org.apache.pekko:pekko-serialization-jackson_2.13](https://github.com/apache/pekko) | `1.6.0` | `1.7.0` |
| [org.apache.pekko:pekko-bom_2.13](https://github.com/apache/pekko) | `1.6.0` | `1.7.0` |
| [org.apache.pekko:pekko-remote_2.13](https://github.com/apache/pekko) | `1.6.0` | `1.7.0` |
| [org.apache.pekko:pekko-connectors-kafka_2.13](https://github.com/apache/pekko-connectors-kafka) | `1.1.0` | `1.2.0` |
| [org.apache.pekko:pekko-connectors-kafka-testkit_2.13](https://github.com/apache/pekko-connectors-kafka) | `1.1.0` | `1.2.0` |
| org.apache.kafka:kafka-clients | `3.9.2` | `4.3.1` |
| [org.apache.pekko:pekko-http-bom_2.13](https://github.com/apache/pekko-http) | `1.3.0` | `1.4.0` |
| [org.mongodb.scala:mongo-scala-driver_2.13](https://github.com/mongodb/mongo-java-driver) | `5.6.5` | `5.11.0` |
| [org.mongodb:bson](https://github.com/mongodb/mongo-java-driver) | `5.6.5` | `5.11.0` |
| [org.mongodb:mongodb-driver-core](https://github.com/mongodb/mongo-java-driver) | `5.6.5` | `5.11.0` |
| [org.mongodb:mongodb-driver-reactivestreams](https://github.com/mongodb/mongo-java-driver) | `5.6.5` | `5.11.0` |
| io.cloudevents:cloudevents-http-basic | `2.5.0` | `5.0.0` |
| org.apache.qpid:qpid-jms-client | `1.16.0` | `2.11.0` |
| [com.rabbitmq:amqp-client](https://github.com/rabbitmq/rabbitmq-java-client) | `5.33.1` | `5.35.0` |
| [com.hivemq:hivemq-mqtt-client](https://github.com/hivemq/hivemq-mqtt-client) | `1.3.15` | `1.4.0` |
| [org.apache.sshd:sshd-core](https://github.com/apache/mina-sshd) | `2.18.0` | `2.19.0` |
| [at.yawk.lz4:lz4-java](https://github.com/yawkat/lz4-java) | `1.11.1` | `1.11.2` |
| [ch.qos.logback:logback-core](https://github.com/qos-ch/logback) | `1.5.35` | `1.6.3` |
| [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) | `1.5.35` | `1.6.3` |
| [net.logstash.logback:logstash-logback-encoder](https://github.com/logfellow/logstash-logback-encoder) | `8.1` | `9.0` |
| [com.github.oshi:oshi-core](https://github.com/oshi/oshi) | `6.12.0` | `7.6.1` |
| [org.webjars.npm:long](https://github.com/dcodeIO/long.js) | `3.2.0` | `5.3.2` |
| software.amazon.awssdk:sts | `2.54.9` | `2.54.11` |
| software.amazon.awssdk:auth | `2.54.9` | `2.54.11` |
| [org.junit.jupiter:junit-jupiter-engine](https://github.com/junit-team/junit-framework) | `5.14.4` | `6.1.3` |
| [org.junit.jupiter:junit-jupiter-params](https://github.com/junit-team/junit-framework) | `5.14.4` | `6.1.3` |
| [org.junit.vintage:junit-vintage-engine](https://github.com/junit-team/junit-framework) | `5.14.4` | `6.1.3` |
| [nl.jqno.equalsverifier:equalsverifier](https://github.com/jqno/equalsverifier) | `4.5` | `4.5.2` |
| [net.bytebuddy:byte-buddy](https://github.com/raphw/byte-buddy) | `1.17.6` | `1.18.13` |
| [io.github.classgraph:classgraph](https://github.com/classgraph/classgraph) | `4.8.126` | `4.8.194` |
| [de.flapdoodle.embed:de.flapdoodle.embed.mongo](https://github.com/flapdoodle-oss/de.flapdoodle.embed.mongo) | `4.20.0` | `5.0.0` |



Updates `com.fasterxml.jackson:jackson-bom` from 2.22.0 to 2.22.2
- [Commits](FasterXML/jackson-bom@jackson-bom-2.22.0...jackson-bom-2.22.2)

Updates `com.networknt:json-schema-validator` from 2.0.3 to 3.0.7
- [Release notes](https://github.com/networknt/json-schema-validator/releases)
- [Changelog](https://github.com/networknt/json-schema-validator/blob/master/CHANGELOG.md)
- [Commits](networknt/json-schema-validator@2.0.3...3.0.7)

Updates `org.apache.pekko:pekko-serialization-jackson_2.13` from 1.6.0 to 1.7.0
- [Changelog](https://github.com/apache/pekko/blob/main/CHANGELOG.md)
- [Commits](apache/pekko@v1.6.0...v1.7.0)

Updates `org.apache.pekko:pekko-bom_2.13` from 1.6.0 to 1.7.0
- [Changelog](https://github.com/apache/pekko/blob/main/CHANGELOG.md)
- [Commits](apache/pekko@v1.6.0...v1.7.0)

Updates `org.apache.pekko:pekko-remote_2.13` from 1.6.0 to 1.7.0
- [Changelog](https://github.com/apache/pekko/blob/main/CHANGELOG.md)
- [Commits](apache/pekko@v1.6.0...v1.7.0)

Updates `org.apache.pekko:pekko-bom_2.13` from 1.6.0 to 1.7.0
- [Changelog](https://github.com/apache/pekko/blob/main/CHANGELOG.md)
- [Commits](apache/pekko@v1.6.0...v1.7.0)

Updates `org.apache.pekko:pekko-connectors-kafka_2.13` from 1.1.0 to 1.2.0
- [Changelog](https://github.com/apache/pekko-connectors-kafka/blob/main/CHANGELOG.md)
- [Commits](apache/pekko-connectors-kafka@v1.1.0...v1.2.0)

Updates `org.apache.pekko:pekko-connectors-kafka-testkit_2.13` from 1.1.0 to 1.2.0
- [Changelog](https://github.com/apache/pekko-connectors-kafka/blob/main/CHANGELOG.md)
- [Commits](apache/pekko-connectors-kafka@v1.1.0...v1.2.0)

Updates `org.apache.kafka:kafka-clients` from 3.9.2 to 4.3.1

Updates `org.apache.pekko:pekko-remote_2.13` from 1.6.0 to 1.7.0
- [Changelog](https://github.com/apache/pekko/blob/main/CHANGELOG.md)
- [Commits](apache/pekko@v1.6.0...v1.7.0)

Updates `org.apache.pekko:pekko-http-bom_2.13` from 1.3.0 to 1.4.0
- [Changelog](https://github.com/apache/pekko-http/blob/main/CHANGELOG.md)
- [Commits](apache/pekko-http@v1.3.0...v1.4.0)

Updates `org.mongodb.scala:mongo-scala-driver_2.13` from 5.6.5 to 5.11.0
- [Release notes](https://github.com/mongodb/mongo-java-driver/releases)
- [Commits](mongodb/mongo-java-driver@r5.6.5...r5.11.0)

Updates `org.mongodb:bson` from 5.6.5 to 5.11.0
- [Release notes](https://github.com/mongodb/mongo-java-driver/releases)
- [Commits](mongodb/mongo-java-driver@r5.6.5...r5.11.0)

Updates `org.mongodb:mongodb-driver-core` from 5.6.5 to 5.11.0
- [Release notes](https://github.com/mongodb/mongo-java-driver/releases)
- [Commits](mongodb/mongo-java-driver@r5.6.5...r5.11.0)

Updates `org.mongodb:mongodb-driver-reactivestreams` from 5.6.5 to 5.11.0
- [Release notes](https://github.com/mongodb/mongo-java-driver/releases)
- [Commits](mongodb/mongo-java-driver@r5.6.5...r5.11.0)

Updates `org.mongodb:bson` from 5.6.5 to 5.11.0
- [Release notes](https://github.com/mongodb/mongo-java-driver/releases)
- [Commits](mongodb/mongo-java-driver@r5.6.5...r5.11.0)

Updates `org.mongodb:mongodb-driver-core` from 5.6.5 to 5.11.0
- [Release notes](https://github.com/mongodb/mongo-java-driver/releases)
- [Commits](mongodb/mongo-java-driver@r5.6.5...r5.11.0)

Updates `org.mongodb:mongodb-driver-reactivestreams` from 5.6.5 to 5.11.0
- [Release notes](https://github.com/mongodb/mongo-java-driver/releases)
- [Commits](mongodb/mongo-java-driver@r5.6.5...r5.11.0)

Updates `io.cloudevents:cloudevents-http-basic` from 2.5.0 to 5.0.0

Updates `org.apache.qpid:qpid-jms-client` from 1.16.0 to 2.11.0

Updates `com.rabbitmq:amqp-client` from 5.33.1 to 5.35.0
- [Release notes](https://github.com/rabbitmq/rabbitmq-java-client/releases)
- [Commits](rabbitmq/rabbitmq-java-client@v5.33.1...v5.35.0)

Updates `com.hivemq:hivemq-mqtt-client` from 1.3.15 to 1.4.0
- [Release notes](https://github.com/hivemq/hivemq-mqtt-client/releases)
- [Changelog](https://github.com/hivemq/hivemq-mqtt-client/blob/master/RELEASE.md)
- [Commits](hivemq/hivemq-mqtt-client@v1.3.15...v1.4.0)

Updates `org.apache.sshd:sshd-core` from 2.18.0 to 2.19.0
- [Release notes](https://github.com/apache/mina-sshd/releases)
- [Changelog](https://github.com/apache/mina-sshd/blob/master/CHANGES.md)
- [Commits](apache/mina-sshd@sshd-2.18.0...sshd-2.19.0)

Updates `at.yawk.lz4:lz4-java` from 1.11.1 to 1.11.2
- [Release notes](https://github.com/yawkat/lz4-java/releases)
- [Changelog](https://github.com/yawkat/lz4-java/blob/main/CHANGES.md)
- [Commits](yawkat/lz4-java@v1.11.1...v1.11.2)

Updates `ch.qos.logback:logback-core` from 1.5.35 to 1.6.3
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](qos-ch/logback@v_1.5.35...v_1.6.3)

Updates `ch.qos.logback:logback-classic` from 1.5.35 to 1.6.3
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](qos-ch/logback@v_1.5.35...v_1.6.3)

Updates `ch.qos.logback:logback-classic` from 1.5.35 to 1.6.3
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](qos-ch/logback@v_1.5.35...v_1.6.3)

Updates `net.logstash.logback:logstash-logback-encoder` from 8.1 to 9.0
- [Release notes](https://github.com/logfellow/logstash-logback-encoder/releases)
- [Commits](logfellow/logstash-logback-encoder@logstash-logback-encoder-8.1...logstash-logback-encoder-9.0)

Updates `com.github.oshi:oshi-core` from 6.12.0 to 7.6.1
- [Release notes](https://github.com/oshi/oshi/releases)
- [Changelog](https://github.com/oshi/oshi/blob/master/CHANGELOG.md)
- [Commits](oshi/oshi@oshi-parent-6.12.0...oshi-parent-7.6.1)

Updates `org.webjars.npm:long` from 3.2.0 to 5.3.2
- [Release notes](https://github.com/dcodeIO/long.js/releases)
- [Commits](dcodeIO/long.js@3.2.0...v5.3.2)

Updates `software.amazon.awssdk:sts` from 2.54.9 to 2.54.11

Updates `software.amazon.awssdk:auth` from 2.54.9 to 2.54.11

Updates `software.amazon.awssdk:auth` from 2.54.9 to 2.54.11

Updates `org.junit.jupiter:junit-jupiter-engine` from 5.14.4 to 6.1.3
- [Release notes](https://github.com/junit-team/junit-framework/releases)
- [Commits](junit-team/junit-framework@r5.14.4...r6.1.3)

Updates `org.junit.jupiter:junit-jupiter-params` from 5.14.4 to 6.1.3
- [Release notes](https://github.com/junit-team/junit-framework/releases)
- [Commits](junit-team/junit-framework@r5.14.4...r6.1.3)

Updates `org.junit.vintage:junit-vintage-engine` from 5.14.4 to 6.1.3
- [Release notes](https://github.com/junit-team/junit-framework/releases)
- [Commits](junit-team/junit-framework@r5.14.4...r6.1.3)

Updates `org.junit.jupiter:junit-jupiter-params` from 5.14.4 to 6.1.3
- [Release notes](https://github.com/junit-team/junit-framework/releases)
- [Commits](junit-team/junit-framework@r5.14.4...r6.1.3)

Updates `org.junit.vintage:junit-vintage-engine` from 5.14.4 to 6.1.3
- [Release notes](https://github.com/junit-team/junit-framework/releases)
- [Commits](junit-team/junit-framework@r5.14.4...r6.1.3)

Updates `nl.jqno.equalsverifier:equalsverifier` from 4.5 to 4.5.2
- [Release notes](https://github.com/jqno/equalsverifier/releases)
- [Changelog](https://github.com/jqno/equalsverifier/blob/main/CHANGELOG.md)
- [Commits](jqno/equalsverifier@equalsverifier-4.5...equalsverifier-4.5.2)

Updates `net.bytebuddy:byte-buddy` from 1.17.6 to 1.18.13
- [Release notes](https://github.com/raphw/byte-buddy/releases)
- [Changelog](https://github.com/raphw/byte-buddy/blob/master/release-notes.md)
- [Commits](raphw/byte-buddy@byte-buddy-1.17.6...byte-buddy-1.18.13)

Updates `io.github.classgraph:classgraph` from 4.8.126 to 4.8.194
- [Release notes](https://github.com/classgraph/classgraph/releases)
- [Commits](classgraph/classgraph@classgraph-4.8.126...classgraph-4.8.194)

Updates `de.flapdoodle.embed:de.flapdoodle.embed.mongo` from 4.20.0 to 5.0.0
- [Commits](flapdoodle-oss/de.flapdoodle.embed.mongo@de.flapdoodle.embed.mongo-4.20.0...de.flapdoodle.embed.mongo-5.0.0)

Updates `org.apache.pekko:pekko-connectors-kafka-testkit_2.13` from 1.1.0 to 1.2.0
- [Changelog](https://github.com/apache/pekko-connectors-kafka/blob/main/CHANGELOG.md)
- [Commits](apache/pekko-connectors-kafka@v1.1.0...v1.2.0)

---
updated-dependencies:
- dependency-name: com.fasterxml.jackson:jackson-bom
  dependency-version: 2.22.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: com.networknt:json-schema-validator
  dependency-version: 3.0.7
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: maven-dependencies
- dependency-name: org.apache.pekko:pekko-serialization-jackson_2.13
  dependency-version: 1.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: org.apache.pekko:pekko-bom_2.13
  dependency-version: 1.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: org.apache.pekko:pekko-remote_2.13
  dependency-version: 1.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: org.apache.pekko:pekko-bom_2.13
  dependency-version: 1.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: org.apache.pekko:pekko-connectors-kafka_2.13
  dependency-version: 1.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: org.apache.pekko:pekko-connectors-kafka-testkit_2.13
  dependency-version: 1.2.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: org.apache.kafka:kafka-clients
  dependency-version: 4.3.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: maven-dependencies
- dependency-name: org.apache.pekko:pekko-remote_2.13
  dependency-version: 1.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: org.apache.pekko:pekko-http-bom_2.13
  dependency-version: 1.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: org.mongodb.scala:mongo-scala-driver_2.13
  dependency-version: 5.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: org.mongodb:bson
  dependency-version: 5.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: org.mongodb:mongodb-driver-core
  dependency-version: 5.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: org.mongodb:mongodb-driver-reactivestreams
  dependency-version: 5.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: org.mongodb:bson
  dependency-version: 5.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: org.mongodb:mongodb-driver-core
  dependency-version: 5.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: org.mongodb:mongodb-driver-reactivestreams
  dependency-version: 5.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: io.cloudevents:cloudevents-http-basic
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: maven-dependencies
- dependency-name: org.apache.qpid:qpid-jms-client
  dependency-version: 2.11.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: maven-dependencies
- dependency-name: com.rabbitmq:amqp-client
  dependency-version: 5.35.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: com.hivemq:hivemq-mqtt-client
  dependency-version: 1.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: org.apache.sshd:sshd-core
  dependency-version: 2.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: at.yawk.lz4:lz4-java
  dependency-version: 1.11.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: ch.qos.logback:logback-core
  dependency-version: 1.6.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: ch.qos.logback:logback-classic
  dependency-version: 1.6.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: ch.qos.logback:logback-classic
  dependency-version: 1.6.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: net.logstash.logback:logstash-logback-encoder
  dependency-version: '9.0'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: maven-dependencies
- dependency-name: com.github.oshi:oshi-core
  dependency-version: 7.6.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: maven-dependencies
- dependency-name: org.webjars.npm:long
  dependency-version: 5.3.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: maven-dependencies
- dependency-name: software.amazon.awssdk:sts
  dependency-version: 2.54.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: software.amazon.awssdk:auth
  dependency-version: 2.54.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: software.amazon.awssdk:auth
  dependency-version: 2.54.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.junit.jupiter:junit-jupiter-engine
  dependency-version: 6.1.3
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: maven-dependencies
- dependency-name: org.junit.jupiter:junit-jupiter-params
  dependency-version: 6.1.3
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: maven-dependencies
- dependency-name: org.junit.vintage:junit-vintage-engine
  dependency-version: 6.1.3
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: maven-dependencies
- dependency-name: org.junit.jupiter:junit-jupiter-params
  dependency-version: 6.1.3
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: maven-dependencies
- dependency-name: org.junit.vintage:junit-vintage-engine
  dependency-version: 6.1.3
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: maven-dependencies
- dependency-name: nl.jqno.equalsverifier:equalsverifier
  dependency-version: 4.5.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: net.bytebuddy:byte-buddy
  dependency-version: 1.18.13
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: io.github.classgraph:classgraph
  dependency-version: 4.8.194
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: de.flapdoodle.embed:de.flapdoodle.embed.mongo
  dependency-version: 5.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: maven-dependencies
- dependency-name: org.apache.pekko:pekko-connectors-kafka-testkit_2.13
  dependency-version: 1.2.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Sep 10, 2026
thjaeckle and others added 2 commits September 14, 2026 10:59
@thjaeckle @claude
fix: adapt code to breaking changes of the grouped dependency bumps
70a7311 
The maven-dependencies group bump (#2558) contains several major upgrades
that need source changes, which made the build fail at the first of them:

* logstash-logback-encoder 8.1 -> 9.0 switched from Jackson 2 to Jackson 3
  ("tools.jackson"): migrate IntLevelJsonProvider to the Jackson 3
  JsonGenerator (Jackson 3 exceptions are unchecked, so writeTo no longer
  declares IOException).

* json-schema-validator 2.0.3 -> 3.0.7 also switched to Jackson 3: migrate
  JsonSchemaTools accordingly, import the tools.jackson jackson-bom (pinned
  to 3.2.1, the version json-schema-validator is built against) in the bom,
  add the Jackson 3 jackson-dataformat-cbor used to bridge Ditto JSON into
  the validator, and move the stale jackson-dataformat-yaml exclusion to its
  new tools.jackson groupId.

* qpid-jms-client 1.16.0 -> 2.11.0 implements Jakarta Messaging instead of
  JMS 2: rename javax.jms -> jakarta.jms across the AMQP 1.0 connectivity
  code and tests (jakarta.jms-api 3.1.0 comes in transitively).

* long.js webjar 3.2.0 -> 5.3.2 no longer ships dist/long.min.js: point the
  Rhino mapper at the ES5 UMD build (umd/index.js), which registers the
  global Long object like the previous build did.

* de.flapdoodle.embed.mongo 4.20.0 -> 5.0.0 moved de.flapdoodle.reverse to
  de.flapdoodle.commons.reverse: adjust the import in
  AggregateThingsMetricsActorTest.

* revert the MongoDB Java driver 5.6.5 -> 5.11.0 bump: per the comment on
  <mongo-java-driver.version> it is deliberately kept in lockstep with the
  driver version pekko-persistence-mongodb (1.5.0, built against 5.6.5) is
  compiled against, and bumped manually when that library updates. Add
  org.mongodb:* to the dependabot ignore list so it is not bumped again.

kafka-clients 3.9.2 -> 4.3.1 needs no code change: the only API removed in
Kafka 4 that pekko-connectors-kafka 1.2.0 still references,
Consumer.committed(TopicPartition, Duration), is only reachable via
RestrictedConsumer (partition assignment handlers) and the
Metadata.GetCommittedOffset ask - neither of which Ditto uses.

Verified with a full clean reactor build and the unit test suites of the
affected modules (base, wot, gateway, policies-model, thingsearch,
connectivity, things, edge), all green.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
@thjaeckle @claude
fix: pin kafka producer linger.ms=0 broken by kafka-clients 4.0 defau…
b9b995e 
…lt change

All 78 Kafka system test failures on this branch share one root cause:
kafka-clients 4.0 raised the default of linger.ms from 0 to 5ms (KIP-1030),
which breaks the client's "delivery.timeout.ms >= linger.ms +
request.timeout.ms" invariant with connectivity.conf's configured timeouts
(both 10000ms) - every KafkaProducer construction fails with
"ConfigException: delivery.timeout.ms should be equal to or larger than
linger.ms + request.timeout.ms", so nothing can be published while consumers
keep working.

Set linger.ms=0 explicitly (with a KAFKA_PRODUCER_LINGER_MS override),
restoring the pre-4.0 publish-immediately behavior Ditto was written against.

Unit tests stayed green because publisher tests mock the producer, so add a
regression test that builds producer and consumer settings from the
production connectivity.conf and constructs the real Kafka clients - which
needs no broker and fails on exactly this class of config-default drift
(verified red without the linger.ms pin, green with it).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Signed-off-by: Thomas Jäckle <thomas.jaeckle@beyonnex.io>
@thjaeckle

thjaeckle commented Sep 21, 2026

Copy link
Copy Markdown
Member

System tests are green: https://github.com/eclipse-ditto/ditto/actions/runs/35598895176

@thjaeckle
thjaeckle merged commit b9baac0 into master Sep 21, 2026
5 checks passed
@dependabot
dependabot Bot deleted the dependabot/maven/bom/maven-dependencies-762555d3db branch September 21, 2026 14:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@thjaeckle