Bump the "dependencies" group with 19 updates across multiple ecosystems

[dependabot]

Bumps the dependencies group with 2 updates in the / directory: com.gradleup.shadow and com.gradle:common-custom-user-data-gradle-plugin.

Updates com.gradleup.shadow from 8.3.9 to 8.3.11

Updates com.gradle:common-custom-user-data-gradle-plugin from 2.6.0 to 2.8.0

Release notes

Sourced from com.gradle:common-custom-user-data-gradle-plugin's releases.

2.8.0

• [NEW] Detect Copilot via the COPILOT_CLI and COPILOT_AGENT environment variables, capturing the AI tag and AI agent value Copilot

2.7.0

• [NEW] Capture Cursor as an AI agent via the CURSOR_AGENT environment variable
• [NEW] Capture Gemini in Android Studio as an AI agent via the ANDROID_STUDIO_AGENT environment variable
• [FIX] Changes to AI agent metadata invalidate the configuration cache

Commits

• 94f998b Merge pull request #533 from gradle/cj/copilot-vscode-detection
• d25afee Update release note for Copilot
• 4d1ead2 Detect GitHub Copilot as an AI agent
• 2c096a6 Merge pull request #531 from gradle/chore/renovate-track-gradle-plugin-javadoc
• 5a49a5c Merge pull request #532 from ryandens/copilot-cli-detection
• 85dcaa5 Link Develocity Gradle plugin API reference instead of pinned Javadoc
• b250480 [Renovate Bot] Update plugin com.gradleup.shadow to v9.6.1 (#530)
• 620e932 Detect GitHub Copilot CLI as an AI agent
• 8b6f6e8 Merge pull request #528 from gradle/rebrand/gradle-com-to-develocity-ai
• d579eda Drop trailing slash on bare develocity.ai URLs
• Additional commits viewable in compare view

Bumps the dependencies group with 6 updates in the /core directory:

Package	From	To
com.fasterxml.jackson.core:jackson-databind	2.18.4	2.22.2
com.google.guava:guava	33.3.1-jre	33.7.1-jre
org.yaml:snakeyaml	2.6	2.7
org.junit.platform:junit-platform-launcher	1.14.3	1.14.4
org.junit.jupiter:junit-jupiter	5.13.4	5.14.4
redis.clients:jedis	7.4.1	8.0.1

Updates com.fasterxml.jackson.core:jackson-databind from 2.18.4 to 2.22.2

Commits

• 25b2a22 [maven-release-plugin] prepare release jackson-databind-2.22.2
• bab1c1a Prep for 2.22.2 release
• bc03cf8 Merge branch '2.21' into 2.22
• 83379fb Merge branch '2.20' into 2.21
• 0d400c9 Merge branch '2.19' into 2.20
• ce36a27 Merge branch '2.18' into 2.19
• 7a209e1 Post-release dep version bump
• a432707 [maven-release-plugin] prepare for next development iteration
• 176df1d [maven-release-plugin] prepare release jackson-databind-2.18.10
• 7785f5f Prep for 2.18.10 release
• Additional commits viewable in compare view

Updates com.google.guava:guava from 33.3.1-jre to 33.7.1-jre

Release notes

Sourced from com.google.guava:guava's releases.

33.7.1

Maven

<dependency>
  <groupId>com.google.guava</groupId>
  <artifactId>guava</artifactId>
  <version>33.7.1-jre</version>
  <!-- or, for Android: -->
  <version>33.7.1-android</version>
</dependency>

Jar files

• 33.7.1-jre.jar
• 33.7.1-android.jar

Guava requires one runtime dependency, which you can download here:

• failureaccess-1.0.3.jar

Javadoc

• 33.7.1-jre
• 33.7.1-android

JDiff

• 33.7.1-jre vs. 33.7.0-jre
• 33.7.1-android vs. 33.7.0-android
• 33.7.1-android vs. 33.7.1-jre

Changelog

Guava 33.7.1 removes the Multi-Release line from our jar manifest, fixing an issue under Java 9 and 10 that was introduced to guava-jre in version 33.7.0. Sorry for the trouble.

33.7.0

Newly introduced problem for Java 9 and Java 10 only

Guava 33.7.0 includes a Multi-Release line in its jar manifest, even though it is no longer a multi-release jar. This causes some problems with tools from Java 9 and Java 10. The issue is fixed in version 33.7.1. Sorry for the trouble.

Maven

<dependency>
  <groupId>com.google.guava</groupId>
  <artifactId>guava</artifactId>
  <version>33.7.0-jre</version>
  <!-- or, for Android: -->
</tr></table> 

... (truncated)

Commits

• See full diff in compare view

Updates org.yaml:snakeyaml from 2.6 to 2.7

Updates org.junit.platform:junit-platform-launcher from 1.14.3 to 1.14.4

Commits

• See full diff in compare view

Updates org.junit.jupiter:junit-jupiter from 5.13.4 to 5.14.4

Release notes

Sourced from org.junit.jupiter:junit-jupiter's releases.

JUnit 5.14.4 = Platform 1.14.4 + Jupiter 5.14.4 + Vintage 5.14.4

See Release Notes.

Full Changelog: junit-team/junit-framework@r5.14.3...r5.14.4

JUnit 5.14.3 = Platform 1.14.3 + Jupiter 5.14.3 + Vintage 5.14.3

See Release Notes.

Full Changelog: junit-team/junit-framework@r5.14.2...r5.14.3

JUnit 5.14.2 = Platform 1.14.2 + Jupiter 5.14.2 + Vintage 5.14.2

See Release Notes.

New Contributors

• @​uglide made their first contribution in junit-team/junit-framework#5245

Full Changelog: junit-team/junit-framework@r5.14.1...r5.14.2

JUnit 5.14.1 = Platform 1.14.1 + Jupiter 5.14.1 + Vintage 5.14.1

See Release Notes.

Full Changelog: junit-team/junit-framework@r5.14.0...r5.14.1

JUnit 5.14.0 = Platform 1.14.0 + Jupiter 5.14.0 + Vintage 5.14.0

See Release Notes.

Full Changelog: junit-team/junit-framework@r5.13.4...r5.14.0

JUnit 5.14.0-RC1 = Platform 1.14.0-RC1 + Jupiter 5.14.0-RC1 + Vintage 5.14.0-RC1

See Release Notes.

Full Changelog: junit-team/junit-framework@r5.13.4...r5.14.0-RC1

Commits

• 096fd69 Release 5.14.4
• 11fd02b Remove JDK 24 (EOL)
• 5b7f023 Fix integration tests on JDK 27
• 18f842a Test against JDK 26 (GA) and JDK 27 (EA)
• a5bf336 Polish 5.14.4 release notes
• 7667c14 Fix race condition in NodeTestTask (#5427)
• ac01f2d Include full display name in legacy XML reports (#5524)
• fbd4a8e Include class template invocation index in legacy reporting names
• 7d6f0c0 Only check PDF for GA releases
• 14f534d Test 5.14.x against JDK 25 ga (#5623)
• Additional commits viewable in compare view

Updates redis.clients:jedis from 7.4.1 to 8.0.1

Release notes

Sourced from redis.clients:jedis's releases.

8.0.1

Jedis 8.0.1 is a maintenance release for the 8.0 line, fixing stale cluster topology after failover in JedisCluster.

Changes

🐛 Bug Fixes

• Refresh primaryNodesCache in JedisClusterInfoCache.discoverClusterSlots (#4692, backported in #4694)

Contributors

We'd like to thank all the contributors who worked on this release!

@​insaf021

Full Changelog: redis/jedis@v8.0.0...v8.0.1

8.0.0

Jedis 8.0.0 completes the client class consolidation started in 7.0.0, modernizes protocol defaults, tightens security defaults, and adds command coverage for Redis 8.8 and the Redis 8.10 preview.

• RESP3 auto-negotiation on by default for all UnifiedJedis-based clients (with graceful RESP2 fallback)
• Final removal of legacy JedisPooled / JedisSentineled classes in favor of the RedisClient family introduced in 7.0.0
• Removal of deprecated UnifiedJedis public constructors
• Internal refactoring that affects users of low-level extension points (custom CommandExecutor, Transaction subclasses, ClusterPipeline, CommandObjects) — protocol and connection wiring is now explicit at construction time
• Search modernization — the low-level cursor APIs are superseded by ftAggregateIterator(), and the manual broadcast API is removed (Redis 8.0+ broadcasts FT.CREATE server-side)
• TLS hostname verification enforced by default in DefaultJedisSocketFactory
• New Redis 8.8 command coverage — XNACK, JSON.SET FPHA, Array commands, INCREX, COUNT aggregator on ZINTER / ZUNION(STORE) and their *STORE variants, multi-aggregator TS.RANGE / TS.MRANGE, plus an experimental COLLECT parameter for FT.AGGREGATE
• Redis 8.10 command coverage — HIMPORT (Hinted Hash Templates), FT.ALIASLIST, MAXCOUNT / MAXSIZE on XREAD and XREADGROUP, SUNIONCARD / SDIFFCARD, LMOVEM / BLMOVEM, TS.READ, TS.NRANGE / TS.NREVRANGE, TS.QUERYLABELS, and EXCLUDEEMPTY on TS.MRANGE / TS.MREVRANGE

For step-by-step upgrade instructions, see the v7 → v8 migration guide: https://redis.github.io/jedis/migration-guides/v7-to-v8/

Changes

🔥 Breaking Changes

• Remove unusable aclLogBinary() methods (#4580)
• Tighten Connection.initializeFromClientConfig() visibility to package-private (#4548)
• CommandObjects refactoring : Enforce protocol (#4515, #4514, #4513)
• Bump org.apache.commons:commons-pool2 from 2.12.1 to 2.13.1 (#4409)
• Fix Connection Close Exception Handling for commons-pool2 2.13.1 (#4439)
• Switch to RESP3 as default protocol version (#4468)
• Drop deprecated classes and constructors (#4488)
• Align Search APIs and behaviour with Redis 8.0+ (#4173)
• refactor: decouple Transaction from Jedis (#4440)
• Introduce request & response policy support (#4411)
• Remove unused leftovers from JedisSharding (#4348)

🧪 Experimental Features

• Add new COLLECT parameter for FT.AGGREGATE (#4534)

... (truncated)

Commits

• 50ec1c8 Backport #4692 to 8.0.x: refresh primaryNodesCache in JedisClusterInfoCache.d...
• 36135a0 Point snapshot example at 8.0.1-SNAPSHOT on the 8.x branch
• 2de1a6d List Redis 8.6, 8.8 and 8.10 as supported in README
• fcf59cd Update version references in README and docs for 8.0.0
• 8d539c0 Bump snapshot version to 8.0.1
• 8e393b9 Fix FTSearchParams.params(Map) dropping values when parameters are already se...
• 9bcb5c6 Pin SDR integration tests to redis:8.6.2 on PR runs (#4676)
• d2f4d5d [Redis 8.10] Add HIMPORT (Hinted Hash Templates) support (#4667)
• f2fe13e Add SECURITY.md with vulnerability reporting policy (#4673)
• 0dca44c decode ScanParams.match with SafeEncoder, not the JVM default charset (#4661)
• Additional commits viewable in compare view

Bumps the dependencies group with 2 updates in the /modules/activemq directory: org.apache.activemq:activemq-client and org.apache.activemq:artemis-jakarta-client.
Bumps the dependencies group with 2 updates in the /modules/azure directory: com.squareup.okhttp3:okhttp and com.azure:azure-sdk-bom.
Bumps the dependencies group with 1 update in the /modules/clickhouse directory: com.clickhouse:client-v2.
Bumps the dependencies group with 1 update in the /modules/cockroachdb directory: org.postgresql:postgresql.
Bumps the dependencies group with 1 update in the /modules/couchbase directory: com.couchbase.client:java-client.
Bumps the dependencies group with 1 update in the /modules/cratedb directory: org.postgresql:postgresql.
Bumps the dependencies group with 1 update in the /modules/databend directory: com.databend:databend-jdbc.
Bumps the dependencies group with 1 update in the /modules/elasticsearch directory: org.elasticsearch.client:elasticsearch-rest-client.
Bumps the dependencies group with 1 update in the /modules/gcloud directory: com.google.cloud:libraries-bom.
Bumps the dependencies group with 5 updates in the /modules/hivemq directory:

Package	From	To
commons-io:commons-io	2.21.0	2.22.0
org.javassist:javassist	3.32.0-GA	3.33.0-GA
com.hivemq:hivemq-extension-sdk	4.50.0	4.55.0
com.hivemq:hivemq-mqtt-client	1.3.15	1.4.0
ch.qos.logback:logback-classic	1.5.37	1.6.3

Bumps the dependencies group with 1 update in the /modules/localstack directory: software.amazon.awssdk:bom.
Bumps the dependencies group with 1 update in the /modules/milvus directory: io.milvus:milvus-sdk-java.
Bumps the dependencies group with 1 update in the /modules/mongodb directory: org.mongodb:mongodb-driver-sync.
Bumps the dependencies group with 1 update in the /modules/mssqlserver directory: io.r2dbc:r2dbc-mssql.
Bumps the dependencies group with 2 updates in the /modules/mysql directory: io.asyncer:r2dbc-mysql and com.mysql:mysql-connector-j.
Bumps the dependencies group with 1 update in the /modules/oceanbase directory: com.mysql:mysql-connector-j.
Bumps the dependencies group with 1 update in the /modules/openfga directory: dev.openfga:openfga-sdk.
Bumps the dependencies group with 1 update in the /modules/oracle-free directory: com.oracle.database.jdbc:ojdbc11.
Bumps the dependencies group with 1 update in the /modules/oracle-xe directory: com.oracle.database.jdbc:ojdbc11.
Bumps the dependencies group with 2 updates in the /modules/orientdb directory: com.orientechnologies:orientdb-client and org.apache.tinkerpop:gremlin-driver.
Bumps the dependencies group with 1 update in the /modules/postgresql directory: org.postgresql:postgresql.
Bumps the dependencies group with 2 updates in the /modules/qdrant directory: io.qdrant:client and io.grpc:grpc-bom.
Bumps the dependencies group with 2 updates in the /modules/questdb directory: org.postgresql:postgresql and org.questdb:questdb.
Bumps the dependencies group with 1 update in the /modules/rabbitmq directory: com.rabbitmq:amqp-client.
Bumps the dependencies group with 2 updates in the /modules/scylladb directory: com.scylladb:java-driver-core and software.amazon.awssdk:dynamodb.
Bumps the dependencies group with 1 update in the /modules/tidb directory: com.mysql:mysql-connector-j.
Bumps the dependencies group with 1 update in the /modules/toxiproxy directory: redis.clients:jedis.
Bumps the dependencies group with 1 update in the /modules/weaviate directory: io.weaviate:client6.

Updates org.apache.activemq:activemq-client from 6.2.4 to 6.3.2

Release notes

Sourced from org.apache.activemq:activemq-client's releases.

Apache ActiveMQ 6.3.2

What's Changed

Performance

• [6.3.x] #2431 Skip topic sendLock for non-persistent sends by @​mattrpav in apache/activemq#2476

Fixes

• [6.3.x] [#] Update TopicRegion removeSubscription to use connection clientId by @​mattrpav in apache/activemq#2478
• [6.3.x] Harden soTimeout vs InactivityMonitor (#2474) by @​cshannon in apache/activemq#2480
• [6.3.x] #2446 Add missing jetty dependency to assembly for websockets by @​mattrpav in apache/activemq#2483
• [6.3.x] Fix network bridge local-side close (#2475) by @​mattrpav in apache/activemq#2503
• [6.3.x] Fix: Assembly startup logs harmless WARN about schemas (#2501) by @​mattrpav in apache/activemq#2504

Dependencies

• [6.3.x] bump netty-version from 4.2.16.Final to 4.2.17.Final by @​dependabot[bot] in apache/activemq#2442
• [6.3.x] bump org.apache.qpid:qpid-jms-client from 2.10.0 to 2.11.0 by @​dependabot[bot] in apache/activemq#2451
• [6.3.x] bump jolokia-version from 2.6.0 to 2.6.1 by @​dependabot[bot] in apache/activemq#2463
• [6.3.x] bump org.apache.groovy:groovy-ant from 5.0.8 to 5.1.0 by @​dependabot[bot] in apache/activemq#2466
• [6.3.x] bump org.apache.groovy:groovy from 5.0.8 to 5.1.0 by @​dependabot[bot] in apache/activemq#2467
• [6.3.x] bump io.fabric8:docker-maven-plugin from 0.48.1 to 0.49.0 by @​dependabot[bot] in apache/activemq#2456
• [6.3.x] bump camel-version from 4.21.0 to 4.22.0 by @​dependabot[bot] in apache/activemq#2448
• [6.3.x] bump jackson-version from 2.22.1 to 2.22.2 by @​dependabot[bot] in apache/activemq#2472
• [6.3.x] Update to Jetty 12.1.12 (#2470) by @​cshannon in apache/activemq#2473
• [6.3.x] bump actions/stale from 10.4.0 to 11.0.0 by @​dependabot[bot] in apache/activemq#2294
• [6.3.x] bump spring-version from 7.0.8 to 7.0.9 by @​dependabot[bot] in apache/activemq#2484
• [6.3.x] bump actions/setup-java from 5 to 6 by @​dependabot[bot] in apache/activemq#2492
• [6.3.x] bump org.javassist:javassist from 3.32.0-GA to 3.33.0-GA by @​dependabot[bot] in apache/activemq#2490
• [6.3.x] bump org.apache.groovy:groovy-ant from 5.1.0 to 5.1.1 by @​dependabot[bot] in apache/activemq#2488
• [6.3.x] bump org.apache.groovy:groovy from 5.1.0 to 5.1.1 by @​dependabot[bot] in apache/activemq#2489

Tasks

• KEYS: Add mattrpav@apache.org GPG release key (#2497) by @​mattrpav in apache/activemq#2498

Full Changelog: apache/activemq@activemq-6.3.1...activemq-6.3.2

Apache ActiveMQ 6.3.1

What's Changed

• [6.3.x] Bootstrap activemq-6.3.x branch (#2245) by @​cshannon in apache/activemq#2262
• [6.3.x] Fix AMQP Object message decompression (#2256) by @​cshannon in apache/activemq#2260
• [6.3.x] Upgrade to Eclipse Temurin 25 for docker image by @​jbonofre in apache/activemq#2258
• [6.3.x] Fix dependabot yml typo (#2284) by @​cshannon in apache/activemq#2285
• [6.3.x] bump jakarta.el:jakarta.el-api from 6.0.0 to 6.0.1 by @​dependabot[bot] in apache/activemq#2345
• [6.3.x] bump commons-codec:commons-codec from 1.22.0 to 1.22.1 by @​dependabot[bot] in apache/activemq#2324
• [6.3.x] bump org.apache.groovy:groovy-ant from 5.0.7 to 5.0.8 by @​dependabot[bot] in apache/activemq#2318
• [6.3.x] bump org.apache.groovy:groovy from 5.0.7 to 5.0.8 by @​dependabot[bot] in apache/activemq#2314
• [6.3.x] bump org.codehaus.jettison:jettison from 1.5.6 to 1.5.7 by @​dependabot[bot] in apache/activemq#2333
• [6.3.x] bump org.apache.qpid:proton-j from 0.34.1 to 0.35.0 by @​dependabot[bot] in apache/activemq#2327
• [6.3.x] bump org.codehaus.mojo:flatten-maven-plugin from 1.7.3 to 1.8.0 by @​dependabot[bot] in apache/activemq#2302
• [6.3.x] bump org.apache.felix:maven-bundle-plugin from 6.0.2 to 6.1.0 by @​dependabot[bot] in apache/activemq#2308
• #2271 Update Producer getDeliveryDelay() to always return zero (0) … by @​mattrpav in apache/activemq#2403

... (truncated)

Commits

• e4e8a6c [maven-release-plugin] prepare release activemq-6.3.2
• 97b6ca8 Fix: Assembly startup logs harmless WARN about schemas (#2501) (#2504)
• 3762e08 Fix network bridge local-side close (#2475) (#2503)
• afdc6e2 KEYS: Add mattrpav@apache.org GPG release key (#2497) (#2498)
• 2686f33 [6.3.x] bump org.apache.groovy:groovy from 5.1.0 to 5.1.1 (#2489)
• f0bf570 [6.3.x] bump org.apache.groovy:groovy-ant from 5.1.0 to 5.1.1 (#2488)
• 62820ea [6.3.x] bump org.javassist:javassist from 3.32.0-GA to 3.33.0-GA (#2490)
• 26e47fb [6.3.x] bump actions/setup-java from 5 to 6 (#2492)
• 0485ffc #2446 Add missing jetty dependency to assembly for websockets (#2483)
• 3dc960b [6.3.x] bump spring-version from 7.0.8 to 7.0.9 (#2484)
• Additional commits viewable in compare view

Updates org.apache.activemq:artemis-jakarta-client from 2.55.0 to 2.56.0

Updates com.squareup.okhttp3:okhttp from 5.4.0 to 5.5.0

Changelog

Sourced from com.squareup.okhttp3:okhttp's changelog.

Version 5.5.0

2026-08-16

This release introduces opt-in support for [Encrypted Client Hello (ECH)]. This new feature improves user privacy by encrypting domain names in transit. With regular TLS, your coffee shop’s Wi-Fi router can see that you’re visiting wikipedia.com, but it cannot see which page you’re looking at. With ECH, the router observes only the IP address. This additional privacy is most effective on sites hosted by big CDNs because the IP address doesn’t imply a particular website.

This requires ECH support in the platform’s TLS stack. Today this is only Android 17 (API 37, released June 2026). When other TLS stacks add ECH support, we'll integrate them.

ECH took a lot of work to implement because the encryption keys are published over DNS in the [HTTPS resource record], and we needed to write new code to fetch these records. This release includes a major update to OkHttp’s DNS API: it now supports multiple resource record types (not just IP addresses!), asynchronous streaming results, and in-memory caching.

To opt in, you can use DnsOverHttps:

// DnsOverHttps itself uses OkHttpClient. Build both clients upon the
// same bootstrap client so they share a connection pool and dispatcher.
val bootstrapClient = OkHttpClient()
// This sample uses Cloudflare's 1.1.1.1 DnsOverHttps service.
val client = bootstrapClient.newBuilder()
.dns(DnsOverHttps.Builder()
.client(bootstrapClient)
.url("https://1.1.1.1/dns-query".toHttpUrl())
.build())
.build()

You could also opt in with our new AndroidDns API. Unfortunately, the privacy benefits of ECH are thwarted because its DNS queries are not encrypted by default.

// AndroidDns fetches the HTTPS DNS resource records necessary for ECH.
val client = OkHttpClient.Builder()
  .dns(AndroidDns())
  .build()

• New: OkHttp artifacts are now signed with our [new signing key]. This project and three sibling projects ([Retrofit], [Okio], and [SQLDelight]) recently joined [the Commonhaus Foundation].
• Fix: MockWebServer’s @StartStop annotation now supports @Nested JUnit 5 tests.
• Fix: Our default TLS hostname verifier now reject hosts that fail IP canonicalization.
• Fix: Closing a multipart part's sink no longer closes the entire request body.
• Fix: Flush HTTP/1 request bodies before detaching the timeout. We had a bug where timeouts

... (truncated)

Commits

• a94bdf1 Prepare for release 5.5.0.
• ecc3b05 Use a fixed size for DoH request body (#9687)
• 9926082 Revert "Use a fixed size for DoH request body" (#9686)
• 0070c2e Use a fixed size for DoH request body
• 1576453 Order ServiceMetadata records per the spec (#9683)
• fb582e9 Flip wiring of Dns.SYSTEM (#9682)
• 4e884ab retryOnConnectionFailure doesn't impact ECH retries (#9681)
• 0433cee Only one contributing.md doc (#9678)
• a2cf5aa Don't recover after an ECH public_name fails to verify (#9680)
• 5410de9 Test ECH + HTTP proxy (#9671)
• Additional commits viewable in compare view

Updates com.azure:azure-sdk-bom from 1.2.32 to 1.3.8

Release notes

Sourced from com.azure:azure-sdk-bom's releases.

com.azure.resourcemanager+azure-resourcemanager-newrelicobservability_1.3.0

1.3.0 (2026-09-02)

• Azure Resource Manager NewRelic Observability client library for Java. This package contains Microsoft Azure SDK for NewRelic Observability Management SDK. Package api-version 2026-06-01. For documentation on how to use this package, please see Azure Management Libraries for Java.

Breaking Changes

models.AppServicesListResponse was removed

models.MonitoredResourceListResponse was removed

models.OrganizationsListResponse was removed

models.MonitoredSubscriptionPropertiesList was removed

models.VMHostsListResponse was removed

models.AccountsListResponse was removed

models.ConnectedPartnerResourcesListResponse was removed

models.TagRuleListResult was removed

models.BillingCycle was removed

models.PlanDataListResponse was removed

models.NewRelicMonitorResourceListResult was removed

models.OperationListResult was removed

models.LinkedResourceListResponse was removed

models.PlanData was modified

• models.BillingCycle billingCycle() -> java.lang.String billingCycle()
• validate() was removed
• withBillingCycle(models.BillingCycle) was removed

models.UserAssignedIdentity was modified

• java.util.UUID clientId() -> java.lang.String clientId()
• validate() was removed
• java.util.UUID principalId() -> java.lang.String principalId()

models.AppServicesGetRequest was modified

• validate() was removed

models.UserInfo was modified

... (truncated)

Commits

• c443b1e Update changelog, prepare for release (#34539)
• ec9f1fb Increment package versions for iothub releases (#34532)
• 61a14e0 [Automation] Generate Fluent Lite from postgresql#package-flexibleserver-2022...
• bf7ae0d Java: 'Release for iothub 2022-11-15-preivew' #3974 by lihong at 20230418 124...
• 9178513 Increment package versions for newrelicobservability releases (#34528)
• ff27e9e [Automation] Generate Fluent Lite from newrelic#package-2022-07-01 (#34524)
• ff5ef52 Increment package versions for elastic releases (#34523)
• 8225dfc Increment package versions for qumulo releases (#34522)
• d99baaf Increment package versions for security releases (#34521)
• 059967c Increment package versions for confidentialledger releases (#34520)
• Additional commits viewable in compare view

Updates com.squareup.okhttp3:okhttp from 5.4.0 to 5.5.0

Changelog

Sourced from com.squareup.okhttp3:okhttp's changelog.

Version 5.5.0

2026-08-16

This release introduces opt-in support for [Encrypted Client Hello (ECH)]. This new feature improves user privacy by encrypting domain names in transit. With regular TLS, your coffee shop’s Wi-Fi router can see that you’re visiting wikipedia.com, but it cannot see which page you’re looking at. With ECH, the router observes only the IP address. This additional privacy is most effective on sites hosted by big CDNs because the IP address doesn’t imply a particular website.

This requires ECH support in the platform’s TLS stack. Today this is only Android 17 (API 37, released June 2026). When other TLS stacks add ECH support, we'll integrate them.

ECH took a lot of work to implement because the encryption keys are published over DNS in the [HTTPS resource record], and we needed to write new code to fetch these records. This release includes a major update to OkHttp’s DNS API: it now supports multiple resource record types (not just IP addresses!), asynchronous streaming results, and in-memory caching.

To opt in, you can use DnsOverHttps:

// DnsOverHttps itself uses OkHttpClient. Build both clients upon the
// same bootstrap client so they share a connection pool and dispatcher.
val bootstrapClient = OkHttpClient()
// This sample uses Cloudflare's 1.1.1.1 DnsOverHttps service.
val client = bootstrapClient.newBuilder()
.dns(DnsOverHttps.Builder()
.client(bootstrapClient)
.url("https://1.1.1.1/dns-query".toHttpUrl())
.build())
.build()

You could also opt in with our new AndroidDns API. Unfortunately, the privacy benefits of ECH are thwarted because its DNS queries are not encrypted by default.

// AndroidDns fetches the HTTPS DNS resource records necessary for ECH.
val client = OkHttpClient.Builder()
  .dns(AndroidDns())
  .build()

• New: OkHttp artifacts are now signed with our [new signing key]. This project and three sibling projects ([Retrofit], [Okio], and [SQLDelight]) recently joined [the Commonhaus Foundation].
• Fix: MockWebServer’s @StartStop annotation now supports @Nested JUnit 5 tests.
• Fix: Our default TLS hostname verifier now reject hosts that fail IP canonicalization.
• Fix: Closing a multipart part's sink no longer closes the entire request body.
• Fix: Flush HTTP/1 request bodies before detaching the timeout. We had a bug where timeouts

... (truncated)

Commits

• a94bdf1 Prepare for release 5.5.0.
• ecc3b05 Use a fixed size for DoH request body (#9687)
• 9926082 Revert "Use a fixed size for DoH request body" (#9686)
• 0070c2e Use a fixed size for DoH request body
• 1576453 Order ServiceMetadata records per the spec (#9683)
• fb582e9 Flip wiring of Dns.SYSTEM (#9682)
• 4e884ab retryOnConnectionFailure doesn't impact ECH retries (#9681)
• 0433cee Only one contributing.md doc (#9678)
• a2cf5aa Don't recover after an ECH public_name fails to verify (#9680)
• 5410de9 Test ECH + HTTP proxy (#9671)
• Additional commits viewable in compare view

Updates com.clickhouse:client-v2 from 0.9.8 to 0.10.0

Release notes

Sourced from com.clickhouse:client-v2's releases.

Release v0.10.0

Release Migration Guide

Breaking Changes

• [jdbc-v2] The driver no longer hardcodes the server settings async_insert=0 and wait_end_of_query=0 on every JDBC connection. This unblocks two scenarios that previously did not work: overriding these settings per connection or per statement, and using the driver against read-only profiles that disallow SETTINGS overrides. There are two consequences:

  • The driver now follows the server-side defaults for these settings (note: starting with ClickHouse 26.3, async_insert defaults to 1). Removing the explicit wait_end_of_query=0 is a no-op against server defaults but lets users opt in to wait_end_of_query=1.
  • The row count returned by java.sql.Statement.executeUpdate(java.lang.String) (and the matching PreparedStatement method) is no longer guaranteed to be accurate for INSERT statements when the server runs them asynchronously, and parsing/data errors in the INSERT body may not surface synchronously as a SQLException. Previously these were accurate because inserts were forced to be synchronous (see also ClickHouse/ClickHouse#57768). To restore the previous behavior, set async_insert=0 (or wait_for_async_insert=1) per connection as server setting. Read more about asynchronous insert: https://clickhouse.com/docs/optimize/asynchronous-inserts.

  (ClickHouse/clickhouse-java#2652, ClickHouse/clickhouse-java#2825)

• [client-v2] Client.Builder#build() now throws ClientMisconfigurationException instead of IllegalArgumentException for authentication and SSL misconfiguration (missing credentials, conflicting authentication methods, missing client certificate when SSL authentication is enabled, and trust store used together with a client certificate). Callers that relied on catching IllegalArgumentException from build() for these cases must catch ClientMisconfigurationException (which extends RuntimeException via ClientException). (ClickHouse/clickhouse-java#2812)

• [client-v2] Combining setUsername(...) + setPassword(...) with a custom Authorization HTTP header ( httpHeader(HttpHeaders.AUTHORIZATION, ...)) now fails at Client.Builder#build() with ClientMisconfigurationException unless HTTP Basic authentication is explicitly disabled via useHTTPBasicAuth(false). Previously this combination was accepted and the custom Authorization header overrode the user/password at request time. (ClickHouse/clickhouse-java#2812)

• [client-v2] The access_token configuration property (set via Client.Builder#setAccessToken(String) or directly through setOption) is now actually applied to outgoing requests as the Authorization HTTP header value verbatim. Previously the value was stored under access_token but never sent on the wire, so providing it alone had no effect on authentication. Callers must include the scheme prefix themselves (e.g. setAccessToken("Bearer <token>")), or use useBearerTokenAuth(String) which prepends Bearer automatically. (ClickHouse/clickhouse-java#2812)

• [client-v2] Client.Builder#useBearerTokenAuth(String) now stores the bearer token under the access_token configuration key (with the Bearer prefix) instead of writing it directly into http_header_authorization. The HTTP wire format is unchanged, but the token is no longer observable through Client#getReadOnlyConfig() under the http_header_authorization key. (ClickHouse/clickhouse-java#2812)

• [client-v2] Fixed inconsistent use of executionTimeout parameter in Client component. The timeout was previously set in milliseconds but mistakenly retrieved and used in seconds in some places. Now it correctly uses milliseconds consistently. (ClickHouse/clickhouse-java#2358)

• [client-v2] The public ClickHouseBinaryFormatWriter interface gained two methods, setString(String, byte[]) and setString(int, byte[]), for writing raw String/FixedString bytes. Code that only uses the interface is unaffected, but any third party that implements ClickHouseBinaryFormatWriter directly is source- and binary-incompatible until it adds these methods (recompiling against the new version is required; otherwise an AbstractMethodError can occur at runtime).

• [client-v2] HTTP 503 Service Unavailable responses are now surfaced as a connection-style failure (

... (truncated)

Changelog

Sourced from com.clickhouse:client-v2's changelog.

0.10.0,

Release Migration Guide

Breaking Changes

• [jdbc-v2] The driver no longer hardcodes the server settings async_insert=0 and wait_end_of_query=0 on every JDBC connection. This unblocks two scenarios that previously did not work: overriding these settings per connection or per statement, and using the driver against read-only profiles that disallow SETTINGS overrides. There are two consequences:

  • The driver now follows the server-side defaults for these settings (note: starting with ClickHouse 26.3, async_insert defaults to 1). Removing the explicit wait_end_of_query=0 is a no-op against server defaults but lets users opt in to wait_end_of_query=1.
  • The row count returned by java.sql.Statement.executeUpdate(java.lang.String) (and the matching PreparedStatement method) is no longer guaranteed to be accurate for INSERT statements when the server runs them asynchronously, and parsing/data errors in the INSERT body may not surface synchronously as a SQLException. Previously these were accurate because inserts were forced to be synchronous (see also ClickHouse/ClickHouse#57768). To restore the previous behavior, set async_insert=0 (or wait_for_async_insert=1) per connection as server setting. Read more about asynchronous insert: https://clickhouse.com/docs/optimize/asynchronous-inserts.

  (ClickHouse/clickhouse-java#2652, ClickHouse/clickhouse-java#2825)

• [client-v2] Client.Builder#build() now throws ClientMisconfigurationException instead of IllegalArgumentException for authentication and SSL misconfiguration (missing credentials, conflicting authentication methods, missing client certificate when SSL authentication is enabled, and trust store used together with a client certificate). Callers that relied ...

  Description has been truncated

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Advanced

Run ID: cba4f979-58fd-4540-99e6-95760e37e060

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}