Skip to content

build(deps): bump the maven-dependencies group across 1 directory with 9 updates#4862

Open
dependabot[bot] wants to merge 2 commits into
masterfrom
dependabot/maven/maven-dependencies-5b5a76210c
Open

build(deps): bump the maven-dependencies group across 1 directory with 9 updates#4862
dependabot[bot] wants to merge 2 commits into
masterfrom
dependabot/maven/maven-dependencies-5b5a76210c

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 23, 2026

Copy link
Copy Markdown
Contributor

Bumps the maven-dependencies group with 9 updates in the / directory:

Package From To
software.amazon.awssdk:sts 2.48.2 2.49.1
software.amazon.awssdk:auth 2.48.2 2.49.1
software.amazon.awssdk:http-auth-aws 2.48.2 2.49.1
software.amazon.awssdk:http-auth-spi 2.48.2 2.49.1
software.amazon.awssdk:http-client-spi 2.48.2 2.49.1
software.amazon.awssdk:utils 2.48.2 2.49.1
com.squareup.okio:okio 3.17.0 3.18.0
com.squareup.okio:okio-jvm 3.17.0 3.18.0
org.apache.maven.plugins:maven-jar-plugin 3.5.0 3.5.1

Updates software.amazon.awssdk:sts from 2.48.2 to 2.49.1

Updates software.amazon.awssdk:auth from 2.48.2 to 2.49.1

Updates software.amazon.awssdk:http-auth-aws from 2.48.2 to 2.49.1

Updates software.amazon.awssdk:http-auth-spi from 2.48.2 to 2.49.1

Updates software.amazon.awssdk:http-client-spi from 2.48.2 to 2.49.1

Updates software.amazon.awssdk:utils from 2.48.2 to 2.49.1

Updates software.amazon.awssdk:auth from 2.48.2 to 2.49.1

Updates software.amazon.awssdk:http-auth-aws from 2.48.2 to 2.49.1

Updates software.amazon.awssdk:http-auth-spi from 2.48.2 to 2.49.1

Updates software.amazon.awssdk:http-client-spi from 2.48.2 to 2.49.1

Updates software.amazon.awssdk:utils from 2.48.2 to 2.49.1

Updates com.squareup.okio:okio from 3.17.0 to 3.18.0

Changelog

Sourced from com.squareup.okio:okio's changelog.

Version 3.18.0

2026-07-21

  • Fix: Use wide character APIs to better support of non-UTF-8 filesystems on Windows.
  • Fix: Don't crash in AssetFileSystem.exists() when the underlying storage throws a FileNotFoundException.
  • Fix: Load WASI paths relative to their preopen. The platform behavior recently changed in NodeJS, causing our WasiFileSystem to be unable to access files!
  • New: Optionally ignore whitespace when decoding hexadecimal.
  • New: Optionally omit padding when encoding Base64.
  • New: BufferedSource.readUInt(), BufferedSink.writeUInt(), and similar functions for UByte, UShort and ULong. Also add support for unsigned and little-endian.
  • New: BufferedSink.utf8Appendable(). Use this to adapt an Okio sink to an Appendable.
  • New: Source.limit() returns a wrapped source with a strict limit on how many bytes are returned.
  • New: ByteString.equals(other, constantTime) for subtle defense against timing attacks.
Commits

Updates com.squareup.okio:okio-jvm from 3.17.0 to 3.18.0

Changelog

Sourced from com.squareup.okio:okio-jvm's changelog.

Version 3.18.0

2026-07-21

  • Fix: Use wide character APIs to better support of non-UTF-8 filesystems on Windows.
  • Fix: Don't crash in AssetFileSystem.exists() when the underlying storage throws a FileNotFoundException.
  • Fix: Load WASI paths relative to their preopen. The platform behavior recently changed in NodeJS, causing our WasiFileSystem to be unable to access files!
  • New: Optionally ignore whitespace when decoding hexadecimal.
  • New: Optionally omit padding when encoding Base64.
  • New: BufferedSource.readUInt(), BufferedSink.writeUInt(), and similar functions for UByte, UShort and ULong. Also add support for unsigned and little-endian.
  • New: BufferedSink.utf8Appendable(). Use this to adapt an Okio sink to an Appendable.
  • New: Source.limit() returns a wrapped source with a strict limit on how many bytes are returned.
  • New: ByteString.equals(other, constantTime) for subtle defense against timing attacks.
Commits

Updates com.squareup.okio:okio-jvm from 3.17.0 to 3.18.0

Changelog

Sourced from com.squareup.okio:okio-jvm's changelog.

Version 3.18.0

2026-07-21

  • Fix: Use wide character APIs to better support of non-UTF-8 filesystems on Windows.
  • Fix: Don't crash in AssetFileSystem.exists() when the underlying storage throws a FileNotFoundException.
  • Fix: Load WASI paths relative to their preopen. The platform behavior recently changed in NodeJS, causing our WasiFileSystem to be unable to access files!
  • New: Optionally ignore whitespace when decoding hexadecimal.
  • New: Optionally omit padding when encoding Base64.
  • New: BufferedSource.readUInt(), BufferedSink.writeUInt(), and similar functions for UByte, UShort and ULong. Also add support for unsigned and little-endian.
  • New: BufferedSink.utf8Appendable(). Use this to adapt an Okio sink to an Appendable.
  • New: Source.limit() returns a wrapped source with a strict limit on how many bytes are returned.
  • New: ByteString.equals(other, constantTime) for subtle defense against timing attacks.
Commits

Updates org.apache.maven.plugins:maven-jar-plugin from 3.5.0 to 3.5.1

Release notes

Sourced from org.apache.maven.plugins:maven-jar-plugin's releases.

3.5.1

📝 Documentation updates

  • Add AGENTS.md + SECURITY.md security-model pointer for scanner discoverability (#550) @​potiuk

👻 Maintenance

  • Add AGENTS.md + SECURITY.md security-model pointer for scanner discoverability (#550) @​potiuk
  • Use plugin version properties (3.x) (#535) @​Bukama

📦 Dependency updates

Commits
  • b0cd63d [maven-release-plugin] prepare release maven-jar-plugin-3.5.1
  • 5318a4f Add AGENTS.md + SECURITY.md security-model pointer for scanner discoverability
  • 8e0b9bb Bump org.apache.maven.plugins:maven-plugins from 48 to 49 (#547)
  • d5a438b Fix javadoc
  • 774fac9 Bump org.codehaus.plexus:plexus-archiver from 4.11.0 to 4.12.0
  • b71f403 Bump mavenVersion from 3.9.15 to 3.9.16 (#536)
  • 9f2a001 Use plugin version properties (3.x) (#535)
  • 68a978f Bump org.apache.maven.plugins:maven-plugins from 47 to 48 (#534)
  • e105821 Bump commons-io:commons-io from 2.21.0 to 2.22.0 (#529)
  • 953dc1a Bump mavenVersion from 3.9.14 to 3.9.15 (#528)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps): bump the maven-dependencies group across 1 directory wit…
b06e74a 
…h 9 updates

Bumps the maven-dependencies group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| software.amazon.awssdk:sts | `2.48.2` | `2.49.1` |
| software.amazon.awssdk:auth | `2.48.2` | `2.49.1` |
| software.amazon.awssdk:http-auth-aws | `2.48.2` | `2.49.1` |
| software.amazon.awssdk:http-auth-spi | `2.48.2` | `2.49.1` |
| software.amazon.awssdk:http-client-spi | `2.48.2` | `2.49.1` |
| software.amazon.awssdk:utils | `2.48.2` | `2.49.1` |
| [com.squareup.okio:okio](https://github.com/lysine-dev/okio) | `3.17.0` | `3.18.0` |
| [com.squareup.okio:okio-jvm](https://github.com/lysine-dev/okio) | `3.17.0` | `3.18.0` |
| [org.apache.maven.plugins:maven-jar-plugin](https://github.com/apache/maven-jar-plugin) | `3.5.0` | `3.5.1` |



Updates `software.amazon.awssdk:sts` from 2.48.2 to 2.49.1

Updates `software.amazon.awssdk:auth` from 2.48.2 to 2.49.1

Updates `software.amazon.awssdk:http-auth-aws` from 2.48.2 to 2.49.1

Updates `software.amazon.awssdk:http-auth-spi` from 2.48.2 to 2.49.1

Updates `software.amazon.awssdk:http-client-spi` from 2.48.2 to 2.49.1

Updates `software.amazon.awssdk:utils` from 2.48.2 to 2.49.1

Updates `software.amazon.awssdk:auth` from 2.48.2 to 2.49.1

Updates `software.amazon.awssdk:http-auth-aws` from 2.48.2 to 2.49.1

Updates `software.amazon.awssdk:http-auth-spi` from 2.48.2 to 2.49.1

Updates `software.amazon.awssdk:http-client-spi` from 2.48.2 to 2.49.1

Updates `software.amazon.awssdk:utils` from 2.48.2 to 2.49.1

Updates `com.squareup.okio:okio` from 3.17.0 to 3.18.0
- [Changelog](https://github.com/lysine-dev/okio/blob/master/CHANGELOG.md)
- [Commits](lysine-dev/okio@parent-3.17.0...parent-3.18.0)

Updates `com.squareup.okio:okio-jvm` from 3.17.0 to 3.18.0
- [Changelog](https://github.com/lysine-dev/okio/blob/master/CHANGELOG.md)
- [Commits](lysine-dev/okio@parent-3.17.0...parent-3.18.0)

Updates `com.squareup.okio:okio-jvm` from 3.17.0 to 3.18.0
- [Changelog](https://github.com/lysine-dev/okio/blob/master/CHANGELOG.md)
- [Commits](lysine-dev/okio@parent-3.17.0...parent-3.18.0)

Updates `org.apache.maven.plugins:maven-jar-plugin` from 3.5.0 to 3.5.1
- [Release notes](https://github.com/apache/maven-jar-plugin/releases)
- [Commits](apache/maven-jar-plugin@maven-jar-plugin-3.5.0...maven-jar-plugin-3.5.1)

---
updated-dependencies:
- dependency-name: software.amazon.awssdk:sts
  dependency-version: 2.49.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: software.amazon.awssdk:auth
  dependency-version: 2.49.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: software.amazon.awssdk:http-auth-aws
  dependency-version: 2.49.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: software.amazon.awssdk:http-auth-spi
  dependency-version: 2.49.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: software.amazon.awssdk:http-client-spi
  dependency-version: 2.49.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: software.amazon.awssdk:utils
  dependency-version: 2.49.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: software.amazon.awssdk:auth
  dependency-version: 2.49.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: software.amazon.awssdk:http-auth-aws
  dependency-version: 2.49.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: software.amazon.awssdk:http-auth-spi
  dependency-version: 2.49.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: software.amazon.awssdk:http-client-spi
  dependency-version: 2.49.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: software.amazon.awssdk:utils
  dependency-version: 2.49.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: com.squareup.okio:okio
  dependency-version: 3.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: com.squareup.okio:okio-jvm
  dependency-version: 3.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: com.squareup.okio:okio-jvm
  dependency-version: 3.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: org.apache.maven.plugins:maven-jar-plugin
  dependency-version: 3.5.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Jul 23, 2026
@kubernetes-prow kubernetes-prow Bot added cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. size/XS Denotes a PR that changes 0-9 lines, ignoring generated files. labels Jul 23, 2026
@kubernetes-prow

kubernetes-prow Bot commented Jul 23, 2026

Copy link
Copy Markdown
Contributor

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: dependabot[bot]
Once this PR has been reviewed and has the lgtm label, please assign yue9944882 for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@kubernetes-prow kubernetes-prow Bot added size/L Denotes a PR that changes 100-499 lines, ignoring generated files. and removed size/XS Denotes a PR that changes 0-9 lines, ignoring generated files. labels Jul 23, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@brendandburns brendandburns Awaiting requested review from brendandburns
@yue9944882 yue9944882 Awaiting requested review from yue9944882

Assignees

No one assigned

Labels

cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. dependencies Pull requests that update a dependency file java Pull requests that update Java code size/L Denotes a PR that changes 100-499 lines, ignoring generated files.

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants