Update all non-major dependencies

[renovate-bot]

This PR contains the following updates:

Package	Type	Update	Change	Age	Adoption	Passing	Confidence
bitnami/kafka (source)		minor	3.8.1-debian-12-r1 -> 3.9.0-debian-12-r4
gradle (source)		minor	8.10.2 -> 8.12
mariadb	service	minor	11.5 -> 11.6
org.assertj:assertj-core (source)	devDependencies	minor	3.26.3 -> 3.27.0
org.mariadb.jdbc:mariadb-java-client (source)	devDependencies	patch	3.5.0 -> 3.5.1
org.owasp.esapi:esapi (source)	devDependencies	minor	2.5.5.0 -> 2.6.0.0
org.apache.activemq:activemq-client (source)	devDependencies	patch	6.1.3 -> 6.1.4
org.springdoc:springdoc-openapi-starter-webmvc-ui (source)	devDependencies	minor	2.6.0 -> 2.7.0
org.eclipse.jgit:org.eclipse.jgit.ssh.apache	devDependencies	minor	7.0.0.202409031743-r -> 7.1.0.202411261347-r
org.projectlombok:lombok (source)	devDependencies	patch	1.18.34 -> 1.18.36
io.github.classgraph:classgraph	devDependencies	patch	4.8.177 -> 4.8.179
org.openapi.generator	plugin	minor	7.8.0 -> 7.10.0
com.github.spotbugs	plugin	patch	6.0.26 -> 6.0.27
io.swagger.core.v3.swagger-gradle-plugin	plugin	patch	2.2.23 -> 2.2.27
org.springframework.boot	plugin	minor	3.3.5 -> 3.4.1
org.quartz-scheduler:quartz (source)	devDependencies	minor	2.3.2 -> 2.5.0
commons-io:commons-io (source)	devDependencies	minor	2.17.0 -> 2.18.0
com.google.googlejavaformat:google-java-format	devDependencies	minor	1.24.0 -> 1.25.2
ch.qos.logback:logback-classic (source, changelog)	devDependencies	patch	1.5.12 -> 1.5.15
ch.qos.logback:logback-core (source, changelog)	devDependencies	patch	1.5.12 -> 1.5.15
software.amazon.awssdk:bom	devDependencies	patch	2.29.9 -> 2.29.40
io.netty:netty-bom (source)	devDependencies	patch	4.1.114.Final -> 4.1.116.Final
com.fasterxml.jackson:jackson-bom	devDependencies	patch	2.18.1 -> 2.18.2
org.junit:junit-bom (source)	devDependencies	patch	5.11.3 -> 5.11.4
org.jetbrains.kotlin:kotlin-bom (source)	devDependencies	minor	2.0.21 -> 2.1.0
io.opentelemetry:opentelemetry-bom	devDependencies	minor	1.44.1 -> 1.45.0
org.springframework.boot:spring-boot-dependencies (source)	devDependencies	minor	3.3.5 -> 3.4.1
org.springframework:spring-framework-bom	devDependencies	minor	6.1.14 -> 6.2.1
io.micrometer:micrometer-bom	devDependencies	minor	1.13.6 -> 1.14.2
io.spring.dependency-management	plugin	patch	1.1.6 -> 1.1.7

---

Release Notes

gradle/gradle (gradle)

v8.12

Compare Source

v8.11.1: 8.11.1

Compare Source

This is a patch release for Gradle 8.11. We recommend users upgrade to 8.11.1 instead of 8.11.

It fixes the following issues:

• #​31268 BuildEventsListenerRegistry corrupted with Isolated Projects and parallel configuration
• #​31282 Running executables sporadically fails with ETXTBSY (Text file busy)
• #​31284 ArrayIndexOutOfBoundsException after upgrading to gradle 8.11 when generating problems report
• #​31310 Unable to run Gradle task in 8.10 due to bytecode interception

Read the Release Notes

Upgrade instructions

Switch your build to use Gradle 8.11.1 by updating your wrapper:

./gradlew wrapper --gradle-version=8.11.1

See the Gradle 8.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

v8.11: 8.11

Compare Source

The Gradle team is excited to announce Gradle 8.11.

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle:
Adam,
alyssoncs,
Bilel MEDIMEGH,
Björn Kautler,
Chuck Thomas,
Daniel Lacasse,
Finn Petersen,
JK,
Jérémie Bresson,
luozexuan,
Mahdi Hosseinzadeh,
Markus Gaisbauer,
Matthew Haughton,
Matthew Von-Maszewski,
ploober,
Siarhei,
Titus James,
vrp0211

Upgrade instructions

Switch your build to use Gradle 8.11 by updating your wrapper:

./gradlew wrapper --gradle-version=8.11

See the Gradle 8.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

mariadb-corporation/mariadb-connector-j (org.mariadb.jdbc:mariadb-java-client)

v3.5.1

Compare Source

Full Changelog

Notable changes

• CONJ-1193 Implement parsec authentication
• CONJ-1207 New HaMode: sequential write, loadbalance read
• CONJ-1208 permit bulk for INSERT ON DUPLICATE KEY UPDATE commands for 11.5.1+ servers

Bugs Fixed

• CONJ-1053 Mark waffle-jna dependency optional in module descriptor
• CONJ-1196 setObject on java.util.Date was considered was a java.sql.Date and truncate hour/minutes/seconds/ms while it must be considered like a java.sql.Timestamp
• CONJ-1211 jdbc 4.3 enquoteIdentifier missing validation
• CONJ-1213 sql command ending with semicolon and trailing space are not using bulk

springdoc/springdoc-openapi (org.springdoc:springdoc-openapi-starter-webmvc-ui)

v2.7.0

Compare Source

Added

• #​2777 - Add SortAsQueryParam annotation
• #​2786 - No static resource swagger-ui/index.html error after migration to 2.7.0-RC1

Changed

• Upgrade spring-boot to 3.4.0
• Upgrade swagger-ui to 5.18.2
• Upgrade spring-security-oauth2-authorization-server to 1.4.0

projectlombok/lombok (org.projectlombok:lombok)

v1.18.36

quartz-scheduler/quartz (org.quartz-scheduler:quartz)

v2.5.0: Quartz 2.5.0

Most Significant Changes This Release (over 2.4.0):

• Move to Jakarta namespace

All changes/updates:

Open Issues

Completed Issues

v2.4.0: Quartz 2.4.0

Most Significant Changes This Release:

• Quartz 2.4.0 now requires minimum Java version of Java 8
• Quartz build system moved to Gradle
• 3rd party libraries (slf4j, log4j, Hikari, etc.) upgraded to more recent versions
• Maven POMs generated from gradle declare 3rd party dependencies as "provided" scope
• Removal of old TerracottaJobStore
• "NativeJob" class removed from "quartz-jobs" artifact. This resolves security concerns related to code execution. While it is possible to safely use this Job class, it is a risk for users that don’t engage some thought. If you wish to still use this job or something like it, the source code for it can now be found as "example15".
• Example programs can now simply be executed via gradle. See the "examples_guide.txt" file in the examples folder of the quartz repository for full description and info.

All changes/updates:

Open Issues

Completed Issues

google/google-java-format (com.google.googlejavaformat:google-java-format)

v1.25.2

Compare Source

Changes:

• Fix a crash formatting text blocks involving trailing whitespace before the close delimiter (#​1205)

Full Changelog: google/google-java-format@v1.25.1...v1.25.2

v1.25.1

Compare Source

Changes:

• Fix a crash in text block formatting (#​1195)

Full Changelog: google/google-java-format@v1.25.0...v1.25.1

v1.25.0

Compare Source

The minimum support JDK version to run google-java-format is now JDK 17 (#​1159). Using google-java-format to format earlier versions of the language is still supported, but running the formatter itself on JDK 17 or newer is required.

Changes:

• Various improvements to text block formatting
• Improve formatting of when pattern guards

Full Changelog: google/google-java-format@v1.24.0...v1.25.0

JetBrains/kotlin (org.jetbrains.kotlin:kotlin-bom)

v2.1.0

Analysis API

New Features

• KT-68603 KotlinDirectInheritorsProvider: add an option to ignore non-kotlin results

Performance Improvements

• KT-70757 Performance problem in KaFirVisibilityChecker for KaFirPsiJavaClassSymbol

Fixes

• KT-70437 Class reference is not resolvable
• KT-57733 Analysis API: Use optimized ModuleWithDependenciesScopes in combined symbol providers
• KT-72389 K2: False positive "Redundant 'protected' modifier" for protected property inside protected constructor from private or internal class
• KT-69190 K2: False-positive "redundant private modifier"
• KT-64984 Analysis API: Support Wasm target
• KT-70375 K2: NPE at org.jetbrains.kotlin.analysis.api.fir.symbols.KaFirNamedClassSymbolBase.createPointer
• KT-71259 K2 evaluator: Invalid smart cast info collecting for Code Fragments
• KT-69360 Lack of implicit receiver for the last statement under lambda in scripts
• KT-70890 Analysis API: Experiment with weak references to LL FIR/analysis sessions in session caches
• KT-70657 Analysis API: Inner types from classes with generics are incorrectly represented by the compiled jars
• KT-71055 Suspend calls inside 'analyze()' break the block guarantees
• KT-70815 Analysis API: Implement stop-the-world session invalidation
• KT-69819 K2 IDE: LHS type in callable references is unresolved when it has type arguments and is qualified
• KT-68761 Analysis API: Experiment with limited-size cache in KaFirSessionProvider
• KT-70384 Analysis API Standalone: The same class in the same two renamed jars is unresolved
• KT-71067 Exceptions from references cancel Find Usages
• KT-69535 Redesign 'containingSymbol'
• KT-71025 K2 IDE: Scopes in "importingScopeContext" have reversed ordering and "indexInTower" values
• KT-67483 K2 IDE: Serializable plugin causes infinite resolve recursion when there is a star import from a class with annotation call
• KT-69416 K2 IDE / Completion: “No classifier found” on simple value creating
• KT-70257 CCE: class kotlin.UInt cannot be cast to class java.lang.Number
• KT-70376 K2 IDE / Kotlin Debugger: IAE “Only componentN functions should be cached this way, but got: toString” on evaluating toString() method for value class
• KT-70264 AA: service registration via XML fails with AbstractMethodError in Lint CLI
• KT-69950 Analysis API: Introduce isSubtypeOf(ClassId)
• KT-68625 K2: “lazyResolveToPhase(STATUS) cannot be called from a transformer with a phase STATUS.”
• KT-67665 K2: contract violation for value class with a constructor parameter with an implicit type
• KT-67009 Analysis API: Add abbreviated type tests for type aliases from source modules
• KT-69977 KaFirFunctionalType#getAbbreviation is always null
• KT-68341 Analysis API: Expanded function types from libraries don't have an abbreviated type
• KT-68857 Analysis API: Refactor annotations
• KT-70386 Do not filter out overloads from different libraries in dangling files
• KT-65552 K2: CANNOT_CHECK_FOR_ERASED in KtTypeCodeFragment
• KT-65803 K2: Analysis API: KtFirTypeProvider#getSubstitutedSuperTypes throws an exception in the case of "Wrong number of type arguments"
• KT-68896 Support VirtualFile binary dependency inputs to Analysis API modules
• KT-69395 K2 IDE: incorrect overload selection from binary dependencies in a shared native source set
• KT-68573 ISE: "Unexpected constant value (kotlin/annotation/AnnotationTarget, CLASS)" at Kt1DescUtilsKt.toKtConstantValue()
• KT-69576 Analysis API: FIR implementation of "isImplicitReferenceToCompanion" returns false for companion references in implicit invoke operator calls
• KT-69568 Analysis API: FIR implementation of "isImplicitReferenceToCompanion" returns true for non-companion references in qualified calls
• KT-69436 Analysis API Platform: Encapsulate LLFirDeclarationModificationService as an engine service
• KT-63004 K2: Analysis API: Design API for querying declarations generated by compiler plugins (similar to indices)
• KT-69452 AA FIR: wrong source PSI after compile-time evaluation
• KT-69598 AA: definitely not-null type at receiver position should be wrapped in parenthesis
• KT-60484 Analysis API: add support for KtType pointers similar to KtSymbolPointer
• KT-68884 Analysis API: Rename/deprecate/remove declarations as part of Stabilization
• KT-69453 AA FIR: miss to handle expected type of lambda with explicit label
• KT-69533 Protect implementation parts of Analysis API with opt-in annotations

Analysis API. FIR

Performance Improvements

• KT-71566 FirElementBuilder#getFirForNonKtFileElement should iterate a Psi file over and over
• KT-71224 Analysis API: FirElementFinder.collectDesignationPath relies on naive iteration through FIR files

Fixes

• KT-70327 Analysis API: Batch inspection causes deadlock in ValueWithPostCompute
• KT-69070 Analysis API: Querying declared member scope for Java symbols results in exception in some use cases
• KT-68268 LLSealedInheritorsProvider: reduce scope to kotlin files
• KT-69671 TYPES phase contract violation through JavaSymbolProvider
• KT-70624 Declaration symbols from code fragments are treated as not local
• KT-70662 NPE: FirLazyBodiesCalculatorKt.calculateLazyBodyForProperty
• KT-70859 Do not fail highlighting due to resolution problems
• KT-70474 FirLazyResolveContractViolationException from JavaSymbolProvider
• KT-70323 FirLazyResolveContractViolationException: lazyResolveToPhase(TYPES) cannot be called from a transformer with a phase TYPES
• KT-71567 LLFirCompilerRequiredAnnotationsTargetResolver should calculate annotation arguments on demand
• KT-71584 getNonLocalContainingOrThisDeclaration treats KtParameter from functional type as non-local

Analysis API. Light Classes

Performance Improvements

• KT-69998 Drop redundant cache from ClassInnerStuffCache

Fixes

• KT-69833 Support value classes
• KT-71693 Wrong name mangling for JvmField class property and companion property clash
• KT-71469 KtLightClassForDecompiledDeclaration: missed kotlinOrigin
• KT-70710 Provide light classes for KMP modules in Android Lint
• KT-70548 SLC: text of class object access expression is not the same as raw text
• KT-70572 SLC: missing isInheritor implementation for type parameter
• KT-70491 SLC: inconsistent source PSI of no-arg constructor for all default values
• KT-70458 SLC: missed auxiliaryOriginalElement for delegated property
• KT-70232 Support a companion object inside value classes
• KT-70349 @delegate:` annotations are missed for light class fields
• KT-68328 Move KtLightClassBase to ULC

Analysis API. Providers and Caches

• KT-65618 K2: resulted FirClass.psi != requested PsiClass from completion
• KT-69292 K2: Analysis API: A property's MUST_BE_INITIALIZED diagnostic is not updated after changing field usage in an accessor
• KT-71468 Drop redundant logic from LLFirJavaFacadeForBinaries
• KT-71700 Cache result of resolveToCall
• KT-71520 Analysis API: LLFirNativeForwardDeclarationsSymbolProvider spends a lot of time in indices

Analysis API. Standalone

• KT-65110 Analysis API: In Standalone mode the order of symbols is unstable

Analysis API. Stubs and Decompilation

• KT-71565 KtClassOrObject should use isLocal from greenStub

Analysis API. Surface

New Features

• KT-69960 resolveToCallCandidates should support operators
• KT-69961 resolveToCallCandidates should support properties

Performance Improvements

• KT-70529 KaSymbol: reduce the number of cached usages
• KT-70165 Introduce PSI-based KaSymbols for K2

Fixes

• KT-69371 Analysis API: expose only interfaces/abstract classes for the resolution API
• KT-69696 KaSymbolByFirBuilder should filter call-site substitutions
• KT-69679 KaDelegatedConstructorCall should have substituted signature
• KT-70206 anonymousSymbol API throws an exception for regular functions
• KT-69699 Receiver type is not substituted in the case of conflict declarations
• KT-69381 Analysis API: Investigate the viability of current KaSymbol caches
• KT-70199 K2: ConcurrentModificationException at FirCallCompleter$LambdaAnalyzerImpl.analyzeAndGetLambdaReturnArguments
• KT-70661 Invalid FirDeclarationOrigin ScriptTopLevelDestructuringDeclarationContainer
• KT-70663 KaFirDestructuringDeclarationSymbol: Failed requirement
• KT-63490 Analysis API: Accessing the Analysis API should be prohibited during dumb mode
• KT-63390 K2: Analysis API: add annotations to KtClassInitializerSymbol
• KT-55124 Design common ancestor for KtValueParameter and KtReceiverParameterSymbol
• KT-71731 directlyOverridenSymbols/allOverridenSymbols works incorrectly for intersection overrides

Apple Ecosystem

• KT-66262 Deprecate and remove support for bitcode embedding from the Kotlin Gradle plugin
• KT-66894 XCFramework task fails when name passed to xcframework DSL is different from framework's name
• KT-65675 XCFrameworkTask produces an xcframework with mismatched casing in embedded frameworks
• KT-69119 xcodeVersion task fails if Xcode isn't installed and apple-specific native targets aren't declared

Backend. Wasm

New Features

• KT-70786 Improve DX of the variable view during debugging in Chrome/Firefox for Kotlin/Wasm
• KT-70331 Support incremental compilation for the Wasm backend
• KT-71686 K/Wasm: Add functions to convert between Kotlin and JS array types
• KT-68185 [WasmJs] Attach js exception object to JsException

Fixes

• KT-71294 Wasm Artifacts/Resource are being loaded relatively instead of absolutely
• KT-71473 K/Wasm: Use --closed-world and related options for Binaryen
• KT-72297 [Wasm] Unused associated object class lead to compiler fail
• KT-72156 custom-formatters.js exists in JAR after publishToMavenLocal but not in the published artifact in Maven public
• KT-65799 K/Wasm: remove default exports from wasm exports
• KT-71800 Wasm compiler: Fix member generation for data classes with an array-type property
• KT-71580 String::toFloat on wasm behaves differently compared to other targets
• KT-71523 K/Wasm: cleanup after fix for KT-71474
• KT-71475 K/Wasm: KClass::qualifiedName returns incorrect result for nested or companion objects
• KT-71474 K/Wasm: KProperty*Impl equals work incorrectly for clabbale reference created in different files or modules
• KT-61130 K/Wasm: Function signatures may clash with base class internal methods from a friend module
• KT-70820 [Kotlin QG] wasm-validator fails when running compile[...]KotlinWasmJsOptimize
• KT-70819 [Kotlin QG] node.js fails when running wasmJs[...]Test KGP tasks
• KT-70394 Investigate increased wasm binary size after switching stdlib compilation to K2
• KT-69627 Remove create###Array functions from WASM stdlib
• KT-68509 Fatal: error validating input in compileProductionExecutableKotlinWasmJsOptimize

Compiler

New Features

• KT-71094 Kotlin/Native incremental compilation: fail compilation if cache build failed
• KT-21908 Support 'when' exhaustiveness checking for generic type parameter with sealed class upper bound
• KT-70679 Kotlin/Native: fill WritableTypeInfo from Swift Export type mapping
• KT-59798 Builder inference is not working when combined with let expression
• KT-54227 Cannot use nullable Nothing as reified type parameter
• KT-71430 Kotlin-to-Java direct actualization implementation
• KT-68163 Expose supplementary compiler warnings via CLI
• KT-69321 Swift export: enable auto-linkage of binary dependencies
• KT-11526 Improve diagnostics for "X overrides nothing"
• KT-49710 False positive NO_ELSE_IN_WHEN with nullable type as receiver
• KT-69729 Support calling super interface Java methods from Kotlin interface
• KT-69508 Improve "Public-API inline function cannot access non-public-API" check for the inline property accessors

Performance Improvements

• KT-71353 FP Kotlin performance degradation (around Cone types hierarchy changes)
• KT-71159 [K2] OOM on large enum classes with fields
• KT-69718 K2: Check for jvm nullability annotations in fir2ir is slow
• KT-68417 Native: LLVM 16 inliner is slow on K/N-produced modules
• KT-63971 K2: Redundant @ParameterName in abbreviated type in metadata

Fixes

• KT-71550 JVM IR: NPE on identity equals of boolean true with null
• KT-72214 -fpass-plugin (clangFlags) is not applied since Kotlin 2.0.20
• KT-68933 CompilationException: Back-end: Could not get inlined class
• KT-72255 Promote jspecify from warning to error
• KT-73065 CCE with context receivers
• KT-61033 K2: implement a diagnostic corresponding to K1's MISSING_BUILT_IN_DECLARATION
• KT-72345 K2: Method 'get' without @Override annotation not called
• KT-71260 K2: Internal compiler error in IrFakeOverrideSymbolBase.getOwner when there is no actual for expect
• KT-72996 false-positive unresolved reference error on an overloaded callable reference in a lambda return position on the left-hand size of an elvis operator
• KT-72552 AutoboxingTransformer fails on during linkage on nested lambdas with cinteroped types
• KT-71751 K2: Skipping code in last statement of lambda
• KT-71121 Kotlin/JS incremental compilation fails with KotlinIllegalArgumentExceptionWithAttachments
• KT-60521 Drop language versions 1.4 and 1.5
• KT-70461 K2: "Inline class types should have the same representation" caused by value class and smart check
• KT-72238 Argument type mismatch in builder inside extension function after ?:
• KT-70306 K2: Lambdas are unserializable: inferred from Java param ? super I
• KT-67383 Incorrect optimisation when optimising for loop with UByte
• KT-68653 Switch latest stable language version in Kotlin project to 2.1
• KT-71708 False negative UNSUPPORTED for collection literals as trailing return value
• KT-72281 K/N: "Failed to wait for cache to be built"
• KT-72017 Enum property reflection returning null KClassifier property for Enum classes defined inside Kotlin Scripts
• KT-69040 PCLA: deal with "deep" calls that can be fully analyzed properly
• KT-69920 K2: java.lang.IllegalArgumentException: FirNamedArgumentExpressionImpl.replaceConeTypeOrNull() during Space project compilation
• KT-69549 Try to move callable reference transformation earlier in pipeline
• KT-63944 Kotlin/Native: Cache flavor selection doesn't respect GC kind
• [`KT-

---

Configuration

📅 Schedule: Branch creation - "* 0-3 * * 1" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.