Update all dependencies (major) by renovate[bot] · Pull Request #4 · 81CuongVn/arrow

renovate · 2023-03-16T09:49:05Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	major	`v3` → `v7`
actions/checkout	action	major	`v3.0.2` → `v7.0.1`
actions/setup-java	action	major	`v3.1.1` → `v5.7.0`
actions/upload-artifact	action	major	`v3.1.0` → `v7.0.1`
actions/upload-artifact	action	major	`v3` → `v7`
font-awesome (source)		major	`4.7.0` → `7.3.0`
gradle (source)		major	`7.4.2` → `9.7.0`
gradle/gradle-build-action	action	major	`v2.1.6` → `v3.5.0`
jquery (source)		major	`3.6.0` → `4.0.0`
stefanzweifel/git-auto-commit-action	action	major	`v4.14.1` → `v7.2.0`
com.jakewharton.retrofit:retrofit2-kotlinx-serialization-converter	dependencies	major	`0.8.0` → `1.0.0`
com.squareup.retrofit2:retrofit	dependencies	major	`2.9.0` → `3.0.0`
com.squareup.retrofit2:converter-moshi	dependencies	major	`2.9.0` → `3.0.0`
com.squareup.retrofit2:converter-gson	dependencies	major	`2.9.0` → `3.0.0`
com.squareup.okhttp3:mockwebserver (source)	dependencies	major	`4.9.3` → `5.4.0`
com.google.devtools.ksp (source)	plugin	major	`1.6.21-1.0.5` → `2.3.11`
com.google.devtools.ksp:com.google.devtools.ksp.gradle.plugin (source)	dependencies	major	`1.6.21-1.0.5` → `2.3.11`
com.google.devtools.ksp:symbol-processing-api (source)	dependencies	major	`1.6.21-1.0.5` → `2.3.11`
org.jetbrains.kotlin.plugin.serialization (source)	plugin	major	`1.6.21` → `2.4.10`
org.jetbrains.kotlin.multiplatform (source)	plugin	major	`1.6.21` → `2.4.10`
org.jetbrains.kotlin.jvm (source)	plugin	major	`1.6.21` → `2.4.10`
io.kotest.multiplatform	plugin	major	`5.3.0` → `6.0.0-LOCAL`
io.kotest:kotest-runner-junit5	dependencies	major	`5.3.0` → `6.2.3`
io.kotest:kotest-property	dependencies	major	`5.3.0` → `6.2.3`
io.kotest:kotest-framework-engine	dependencies	major	`5.3.0` → `6.2.3`
io.kotest:kotest-assertions-core	dependencies	major	`5.3.0` → `6.2.3`
org.junit.vintage:junit-vintage-engine (source)	dependencies	major	`5.8.2` → `6.1.3`
org.junit.jupiter:junit-jupiter-engine (source)	dependencies	major	`5.8.2` → `6.1.3`
org.junit.jupiter:junit-jupiter (source)	dependencies	major	`5.8.2` → `6.1.3`
org.jetbrains.dokka	plugin	major	`1.6.21` → `2.2.0`
ru.vyarus.animalsniffer	plugin	major	`1.5.4` → `2.0.1`

Release Notes

actions/checkout (actions/checkout)

`v7.0.1`

Compare Source

Bump github/codeql-action from 3 to 4 by @dependabot[bot] in #2475
Bump actions/setup-node from 4 to 6 by @dependabot[bot] in #2477
Bump docker/build-push-action from 6.5.0 to 7.2.0 by @dependabot[bot] in #2478
Bump docker/login-action from 3.3.0 to 4.2.0 by @dependabot[bot] in #2479
Bump actions/checkout from 6 to 7 by @dependabot[bot] in #2488
Bump actions/upload-artifact from 4 to 7 by @dependabot[bot] in #2476
eslint 9 by @dependabot[bot] in #2474
Bump the minor-actions-dependencies group with 2 updates by @dependabot[bot] in #2499
skip running unsafe pr check if input is default by @aiqiaoy in #2518
trim only ascii whitespace for branch by @aiqiaoy in #2521
escape values passed to --unset by @aiqiaoy in #2530

`v7.0.0`

Compare Source

Block checking out fork PR for pull_request_target and workflow_run by @aiqiaoy in #2454
Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @dependabot[bot] in #2458
Bump flatted from 3.3.1 to 3.4.2 by @dependabot[bot] in #2460
Bump js-yaml from 4.1.0 to 4.2.0 by @dependabot[bot] in #2461
Bump @actions/core and @actions/tool-cache and Remove uuid by @dependabot[bot] in #2459
upgrade module to esm and update dependencies by @aiqiaoy in #2463
Bump the minor-npm-dependencies group across 1 directory with 3 updates by @dependabot[bot] in #2462

`v7`

Compare Source

Block checking out fork PR for pull_request_target and workflow_run by @aiqiaoy in #2454
Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @dependabot[bot] in #2458
Bump flatted from 3.3.1 to 3.4.2 by @dependabot[bot] in #2460
Bump js-yaml from 4.1.0 to 4.2.0 by @dependabot[bot] in #2461
Bump @actions/core and @actions/tool-cache and Remove uuid by @dependabot[bot] in #2459
upgrade module to esm and update dependencies by @aiqiaoy in #2463
Bump the minor-npm-dependencies group across 1 directory with 3 updates by @dependabot[bot] in #2462

`v6.1.0`

Compare Source

`v6.0.3`

Compare Source

Fix checkout init for SHA-256 repositories by @yaananth in #2439
fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in #2414

`v6.0.2`

Compare Source

Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in #2356

`v6.0.1`

Compare Source

Add worktree support for persist-credentials includeIf by @ericsciple in #2327

`v6.0.0`

Compare Source

Persist creds to a separate file by @ericsciple in #2286
Update README to include Node.js 24 support details and requirements by @salmanmkc in #2248

`v6`

Compare Source

Fix checkout init for SHA-256 repositories by @yaananth in #2439
fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in #2414

`v5.1.0`

Compare Source

`v5.0.1`

Compare Source

Port v6 cleanup to v5 by @ericsciple in #2301

`v5.0.0`

Compare Source

Update actions checkout to use node 24 by @salmanmkc in #2226

`v5`

Compare Source

Port v6 cleanup to v5 by @ericsciple in #2301

`v4.4.0`

Compare Source

`v4.3.1`

Compare Source

Port v6 cleanup to v4 by @ericsciple in #2305

`v4.3.0`

Compare Source

docs: update README.md by @motss in #1971
Add internal repos for checking out multiple repositories by @mouismail in #1977
Documentation update - add recommended permissions to Readme by @benwells in #2043
Adjust positioning of user email note and permissions heading by @joshmgross in #2044
Update README.md by @nebuk89 in #2194
Update CODEOWNERS for actions by @TingluoHuang in #2224
Update package dependencies by @salmanmkc in #2236

`v4.2.2`

Compare Source

url-helper.ts now leverages well-known environment variables by @jww3 in #1941
Expand unit test coverage for isGhes by @jww3 in #1946

`v4.2.1`

Compare Source

Check out other refs/* by commit if provided, fall back to ref by @orhantoy in #1924

`v4.2.0`

Compare Source

Add Ref and Commit outputs by @lucacome in #1180
Dependency updates by @dependabot- #1777, #1872

`v4.1.7`

Compare Source

Bump the minor-npm-dependencies group across 1 directory with 4 updates by @dependabot in #1739
Bump actions/checkout from 3 to 4 by @dependabot in #1697
Check out other refs/* by commit by @orhantoy in #1774
Pin actions/checkout's own workflows to a known, good, stable version. by @jww3 in #1776

`v4.1.6`

Compare Source

Check platform to set archive extension appropriately by @cory-miller in #1732

`v4.1.5`

Compare Source

Update NPM dependencies by @cory-miller in #1703
Bump github/codeql-action from 2 to 3 by @dependabot in #1694
Bump actions/setup-node from 1 to 4 by @dependabot in #1696
Bump actions/upload-artifact from 2 to 4 by @dependabot in #1695
README: Suggest user.email to be 41898282+github-actions[bot]@users.noreply.github.com by @cory-miller in #1707

`v4.1.4`

Compare Source

Disable extensions.worktreeConfig when disabling sparse-checkout by @jww3 in #1692
Add dependabot config by @cory-miller in #1688
Bump the minor-actions-dependencies group with 2 updates by @dependabot in #1693
Bump word-wrap from 1.2.3 to 1.2.5 by @dependabot in #1643

`v4.1.3`

Compare Source

Check git version before attempting to disable sparse-checkout by @jww3 in #1656
Add SSH user parameter by @cory-miller in #1685
Update actions/checkout version in update-main-version.yml by @jww3 in #1650

`v4.1.2`

Compare Source

Fix: Disable sparse checkout whenever sparse-checkout option is not present @dscho in #1598

`v4.1.1`

Compare Source

Correct link to GitHub Docs by @peterbe in #1511
Link to release page from what's new section by @cory-miller in #1514

Port v6 cleanup to v4 by @ericsciple in #2305

actions/setup-java (actions/setup-java)

`v5.7.0`

Compare Source

`v5.6.0`

Compare Source

What's Changed

Backport to v5: Add Maven compiler problem matcher for javac diagnostics by @brunoborges in #1087
feat: expose cache-primary-key output (#597) [v5 backport] by @brunoborges in #1089
dist: Cover Tencent Kona JDK 25 (#1108) [v5 backport] by @brunoborges in #1110
Backport #1111: Preserve Maven toolchains across repeated setup-java runs (#1099) by @brunoborges in #1113
Backport #1097/#1098 to v5: cache Maven and Gradle wrapper distributions separately by @brunoborges in #1122

Full Changelog: actions/setup-java@v5...v5.6.0

`v5.5.0`

Compare Source

`v5.4.0`

Compare Source

What's Changed

Bump @typescript-eslint/parser from 8.48.0 to 8.61.1 by @dependabot[bot] in #1021
Fix codeql workflow permissions by @jsoref in #993
fix CodeQL permissions by @gdams in #1025
fix: reject non-semver candidate versions in isVersionSatisfies by @sproctor in #1009
Bump @actions/cache to 5.1.0, handle cache write denied by @jasongin in #1026
Add Maven Wrapper cache feature by @mahabaleshwars in #1027
Spelling by @jsoref in #713
add link to advanced configuration for JetBrains by @robstoll in #850
docs(action): fix missing required or default fields by @kranthipoturaju in #1007
feat: add microsoft openjdk 17.0.18 by @al-kau in #1002
Update README.md - use "alert syntax for Markdown" for notes by @mhoffrog in #924
Bump undici from 6.24.1 to 6.27.0 by @dependabot[bot] in #1033
Update contributor guide with emoji for clarity by @brunoborges in #1028
add javac problem matcher by @Trass3r in #562
Clarify README version syntax and migration guidance by @brunoborges with @Copilot in #1038
Update undici artifacts to 6.27.0 (license cache + dist) by @brunoborges in #1040
docs: enhance custom jdk file installation by @stephanabel in #996
Templates for new Java distributions by @panticmilos in #429
Bump actions/checkout from 6 to 7 by @dependabot[bot] in #1032
Bump @types/node from 25.9.3 to 26.0.0 by @dependabot[bot] in #1031
docs: replace non-existent HelloWorldApp references with java --version by @brunoborges with @Copilot in #1043
docs: add JavaFX Maven project configuration instructions by @brunoborges with @Copilot in #1044
docs: self-signed certificate / internal CA handling for GitHub Enterprise by @brunoborges in #1050
docs: document importing an internal CA into the installed JDK (cacerts) by @brunoborges in #1051
chore: Harden workflows: least-privilege permissions + zizmor integration by @brunoborges in #1039
dist: Add GraalVM Community distribution support by @brunoborges with @Copilot in #1042
docs: note jdkfile approach for Early Access / unreleased JDK builds by @brunoborges in #1058
dist: Apply Copilot review suggestions from PR #1042 (GraalVM Community) by @brunoborges in #1059

New Contributors

@jsoref made their first contribution in #993
@sproctor made their first contribution in #1009
@jasongin made their first contribution in #1026
@robstoll made their first contribution in #850
@kranthipoturaju made their first contribution in #1007
@al-kau made their first contribution in #1002
@mhoffrog made their first contribution in #924
@brunoborges made their first contribution in #1028
@Trass3r made their first contribution in #562
@stephanabel made their first contribution in #996

Full Changelog: actions/setup-java@v5...v5.4.0

`v5.3.0`

Compare Source

What's Changed

chore: update Java version to 25 in setup examples by @alaahong in #969
Bump minimatch from 3.1.2 to 3.1.5 by @dependabot[bot] in #984
Refactor error handling and improve test logging for installers by @chiranjib-swain in #989
chore: upgrade dependencies (@actions/core, cache, glob, http-client, tool-cache, xmlbuilder2) by @Copilot in #999
Add Oracle JDK 17 licensing limitation note by @mahabaleshwars in #1001
Update readme for ubuntu sudo java_home behavior by @mahabaleshwars in #1013
temurin: add support for Alpine Linux by @gdams in #674
fix: resolve npm audit vulnerabilities in fast-xml-builder and fast-xml-parser by @gdams in #1015
Bump @typescript-eslint/eslint-plugin from 8.35.1 to 8.48.0 by @dependabot[bot] in #952
Bump eslint-config-prettier from 8.10.0 to 10.1.8 by @dependabot[bot] in #881
Bump picomatch, @types/jest, jest, jest-circus and ts-jest by @dependabot[bot] in #1016
Bump @types/node from 24.1.0 to 25.9.3 by @dependabot[bot] in #950
Implement pagination with link headers for Adoptium based apis by @johnoliver in #1014
Make the Adoptopenjdk package type look at the Temurin repo first for latest assets by @johnoliver in #522
Bump @vercel/ncc from 0.38.1 to 0.44.0 by @dependabot[bot] in #1018

New Contributors

@alaahong made their first contribution in #969
@Copilot made their first contribution in #999
@johnoliver made their first contribution in #1014

Full Changelog: actions/setup-java@v5...v5.3.0

`v5.2.0`

Compare Source

What's Changed

Enhancement

Retry on HTTP 522 Connection timed out by @findepi in #964

Documentation Changes

Update gradle caching by @priya-kinthali in #972
Update checkout to v6 by @mahabaleshwars in #973

Dependency Updates

Upgrade @actions/cache to v5 by @salmanmkc in #968
Upgrade actions/checkout from 5 to 6 by @dependabot in #961

New Contributors

@findepi made their first contribution in #964

Full Changelog: actions/setup-java@v5...v5.2.0

`v5.1.0`

Compare Source

What's Changed

New Features

Add support for .sdkmanrc file in java-version-file parameter by @guicamest in #736
Add support for Microsoft OpenJDK 25 builds by @the-mod in #927

Bug Fixes & Improvements

Update Regex to Support All ASDF Versions for the supported distributions in tool-versions File by @aparnajyothi-y in #767
Enhance error logging for network failures to include endpoint/IP details, add retry mechanism and update workflows to use macos-15-intel by @priya-kinthali in #946
Update SapMachine URLs by @RealCLanger in #955
Add GitHub Token Support for GraalVM and Refactor Code by @mahabaleshwars in #849

Documentation changes

Update documentation to use checkout and Java v5 by @lmvysakh in #903
Clarify JAVA_HOME and PATH setup in README by @chiranjib-swain in #841

Dependency updates

Upgrade prettier from 2.8.8 to 3.6.2 and document breaking changes in v5 by @dependabot in #873
Upgrade actions/publish-action from 0.3.0 to 0.4.0 by @dependabot in #912

New Contributors

@lmvysakh made their first contribution in #903
@chiranjib-swain made their first contribution in #841
@the-mod made their first contribution in #927
@priya-kinthali made their first contribution in #946
@guicamest made their first contribution in #736

Full Changelog: actions/setup-java@v5...v5.1.0

`v5.0.0`

Compare Source

What's Changed

Breaking Changes

Upgrade to node 24 by @salmanmkc in #888

Make sure your runner is updated to this version or newer to use this release. v2.327.1 Release Notes

Dependency Upgrades

Upgrade Publish Immutable Action by @HarithaVattikuti in #798
Upgrade eslint-plugin-jest from 27.9.0 to 28.11.0 by @dependabot[bot] in #730
Upgrade undici from 5.28.5 to 5.29.0 by @dependabot[bot] in #833
Upgrade form-data to bring in fix for critical vulnerability by @gowridurgad in #887
Upgrade actions/checkout from 4 to 5 by @dependabot[bot] in #896

Bug Fixes

Prevent default installation of JetBrains pre-releases by @priyagupta108 in #859
Improve Error Handling for Setup-Java Action to Help Debug Intermittent Failures by @gowridurgad in #848

New Contributors

@gowridurgad made their first contribution in #848
@salmanmkc made their first contribution in #888

Full Changelog: actions/setup-java@v4...v5.0.0

`v5`

Compare Source

`v4.9.1`

Compare Source

Adds a deprecation warning for setup-java v4.

`v4.9.0`

Compare Source

`v4.8.0`

Compare Source

What's Changed

License and Audit Fixes by @HarithaVattikuti in #960
Update SapMachine URLs by @RealCLanger in #965

Full Changelog: actions/setup-java@v4...v4.8.0

`v4.7.1`

Compare Source

What's Changed

Documentation changes

Add Documentation to Recommend Using GraalVM JDK 17 Version to 17.0.12 to Align with GFTC License Terms by @aparnajyothi-y in #704
Remove duplicated GraalVM section in documentation by @Marcono1234 in #716

Dependency updates:

Upgrade @action/cache from 4.0.0 to 4.0.2 by @aparnajyothi-y in #766
Upgrade @actions/glob from 0.4.0 to 0.5.0 by @dependabot in #744
Upgrade ts-jest from 29.1.2 to 29.2.5 by @dependabot in #743
Upgrade @action/cache to 4.0.3 by @aparnajyothi-y in #773

Full Changelog: actions/setup-java@v4...v4.7.1

`v4.7.0`

Compare Source

What's Changed

Configure Dependabot settings by @HarithaVattikuti in #722
README Update: Added a permissions section by @benwells in #723
Upgrade cache from version 3.2.4 to 4.0.0 by @aparnajyothi-y in #724
Upgrade @actions/http-client from 2.2.1 to 2.2.3 by @dependabot in #728
Upgrade actions/publish-immutable-action from 0.0.3 to 0.0.4 by @dependabot in #727
Upgrade @types/jest from 29.5.12 to 29.5.14 by @dependabot in #729

New Contributors

@benwells made their first contribution in #723

Full Changelog: actions/setup-java@v4...v4.7.0

[`v4.6.0`](https://redirect.github.com/act

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

socket-security · 2026-04-15T13:21:19Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	License
com.squareup.retrofit2/retrofit@2.9.0 ⏵ 3.0.0
org.junit.jupiter/junit-jupiter-engine@5.8.2 ⏵ 6.1.3
org.junit.vintage/junit-vintage-engine@5.8.2 ⏵ 6.1.3
org.junit.jupiter/junit-jupiter@5.8.2 ⏵ 6.1.3
com.jakewharton.retrofit/retrofit2-kotlinx-serialization-converter@0.8.0 ⏵ 1.0.0
com.squareup.okhttp3/mockwebserver@4.9.3 ⏵ 5.4.0	⁺⁶⁰
com.squareup.retrofit2/converter-gson@2.9.0 ⏵ 3.0.0
com.squareup.retrofit2/converter-moshi@2.9.0 ⏵ 3.0.0
io.kotest/kotest-runner-junit5@5.3.0 ⏵ 6.2.3
io.kotest/kotest-assertions-core@5.3.0 ⏵ 6.2.3		⁺²
io.kotest/kotest-framework-engine@5.3.0 ⏵ 6.2.3		⁺²
io.kotest/kotest-property@5.3.0 ⏵ 6.2.3

View full report

socket-security · 2026-06-12T23:50:00Z

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action	Severity	Alert (click "▶" to expand/collapse)
Warn		Obfuscated code: maven `com.squareup.retrofit2:retrofit` is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: gradle/libs.versions.toml → `maven/com.squareup.retrofit2/retrofit@3.0.0` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore maven/com.squareup.retrofit2/retrofit@3.0.0`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Obfuscated code: maven `net.bytebuddy:byte-buddy-agent` is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: `?` → `maven/io.kotest/kotest-framework-engine@6.2.3` → `maven/net.bytebuddy/byte-buddy-agent@1.10.9` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore maven/net.bytebuddy/byte-buddy-agent@1.10.9`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Obfuscated code: maven `net.bytebuddy:byte-buddy` is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: `?` → `maven/io.kotest/kotest-framework-engine@6.2.3` → `maven/net.bytebuddy/byte-buddy@1.10.9` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore maven/net.bytebuddy/byte-buddy@1.10.9`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Obfuscated code: maven `net.bytebuddy:byte-buddy` is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: `?` → `maven/io.kotest/kotest-framework-engine@6.2.3` → `maven/net.bytebuddy/byte-buddy@1.10.9` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore maven/net.bytebuddy/byte-buddy@1.10.9`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Obfuscated code: maven `net.bytebuddy:byte-buddy` is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: `?` → `maven/io.kotest/kotest-framework-engine@6.2.3` → `maven/net.bytebuddy/byte-buddy@1.10.9` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore maven/net.bytebuddy/byte-buddy@1.10.9`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Obfuscated code: maven `net.bytebuddy:byte-buddy` is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: `?` → `maven/io.kotest/kotest-framework-engine@6.2.3` → `maven/net.bytebuddy/byte-buddy@1.10.9` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore maven/net.bytebuddy/byte-buddy@1.10.9`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Obfuscated code: maven `net.bytebuddy:byte-buddy` is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: `?` → `maven/io.kotest/kotest-framework-engine@6.2.3` → `maven/net.bytebuddy/byte-buddy@1.10.9` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore maven/net.bytebuddy/byte-buddy@1.10.9`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Obfuscated code: maven `net.bytebuddy:byte-buddy` is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: `?` → `maven/io.kotest/kotest-framework-engine@6.2.3` → `maven/net.bytebuddy/byte-buddy@1.10.9` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore maven/net.bytebuddy/byte-buddy@1.10.9`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Obfuscated code: maven `net.bytebuddy:byte-buddy` is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: `?` → `maven/io.kotest/kotest-framework-engine@6.2.3` → `maven/net.bytebuddy/byte-buddy@1.10.9` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore maven/net.bytebuddy/byte-buddy@1.10.9`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Obfuscated code: maven `net.bytebuddy:byte-buddy` is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: `?` → `maven/io.kotest/kotest-framework-engine@6.2.3` → `maven/net.bytebuddy/byte-buddy@1.10.9` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore maven/net.bytebuddy/byte-buddy@1.10.9`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

| datasource | package | from | to | | -------------- | ------------------------------------------------------------------------------------------------- | ------------ | ----------- | | github-tags | actions/checkout | v3.7.0 | v7.0.1 | | github-tags | actions/checkout | v3.0.2 | v7.0.1 | | github-tags | actions/setup-java | v3.1.1 | v5.7.0 | | github-tags | actions/upload-artifact | v3.1.0 | v7.0.1 | | github-tags | actions/upload-artifact | v3.2.2 | v7.0.1 | | cdnjs | font-awesome/css/font-awesome.css | 4.7.0 | 7.3.0 | | gradle-version | gradle | 7.4.2 | 9.7.0 | | github-tags | gradle/gradle-build-action | v2.1.6 | v3.5.0 | | cdnjs | jquery/jquery.min.js | 3.6.0 | 4.0.0 | | github-tags | stefanzweifel/git-auto-commit-action | v4.14.1 | v7.2.0 | | maven | com.jakewharton.retrofit:retrofit2-kotlinx-serialization-converter | 0.8.0 | 1.0.0 | | maven | com.squareup.retrofit2:retrofit | 2.9.0 | 3.0.0 | | maven | com.squareup.retrofit2:converter-moshi | 2.9.0 | 3.0.0 | | maven | com.squareup.retrofit2:converter-gson | 2.9.0 | 3.0.0 | | maven | com.squareup.okhttp3:mockwebserver | 4.9.3 | 5.4.0 | | maven | com.google.devtools.ksp:com.google.devtools.ksp.gradle.plugin | 1.6.21-1.0.5 | 2.3.11 | | maven | com.google.devtools.ksp:symbol-processing-api | 1.6.21-1.0.5 | 2.3.11 | | maven | org.jetbrains.kotlin.plugin.serialization:org.jetbrains.kotlin.plugin.serialization.gradle.plugin | 1.6.21 | 2.4.10 | | maven | org.jetbrains.kotlin.multiplatform:org.jetbrains.kotlin.multiplatform.gradle.plugin | 1.6.21 | 2.4.10 | | maven | org.jetbrains.kotlin.jvm:org.jetbrains.kotlin.jvm.gradle.plugin | 1.6.21 | 2.4.10 | | maven | io.kotest.multiplatform:io.kotest.multiplatform.gradle.plugin | 5.3.0 | 6.0.0-LOCAL | | maven | io.kotest:kotest-runner-junit5 | 5.3.0 | 6.2.3 | | maven | io.kotest:kotest-property | 5.3.0 | 6.2.3 | | maven | io.kotest:kotest-framework-engine | 5.3.0 | 6.2.3 | | maven | io.kotest:kotest-assertions-core | 5.3.0 | 6.2.3 | | maven | org.junit.vintage:junit-vintage-engine | 5.8.2 | 6.1.3 | | maven | org.junit.jupiter:junit-jupiter-engine | 5.8.2 | 6.1.3 | | maven | org.junit.jupiter:junit-jupiter | 5.8.2 | 6.1.3 | | maven | org.jetbrains.dokka:org.jetbrains.dokka.gradle.plugin | 1.6.21 | 2.2.0 | | maven | ru.vyarus.animalsniffer:ru.vyarus.animalsniffer.gradle.plugin | 1.5.4 | 2.0.1 |

renovate Bot changed the title ~~chore(deps): update dependency gradle to v8~~ chore(deps): update all dependencies (major) May 30, 2023

renovate Bot force-pushed the renovate/major-all branch from ec1729f to aa0bfcd Compare May 30, 2023 05:58

renovate Bot force-pushed the renovate/major-all branch from aa0bfcd to 1c4dfe5 Compare July 1, 2023 00:22

renovate Bot force-pushed the renovate/major-all branch from 1c4dfe5 to e02e1d6 Compare July 11, 2023 05:33

renovate Bot force-pushed the renovate/major-all branch from e02e1d6 to a03fc1e Compare August 18, 2023 05:35

renovate Bot force-pushed the renovate/major-all branch from a03fc1e to 519c4a4 Compare September 5, 2023 06:04

renovate Bot force-pushed the renovate/major-all branch from 519c4a4 to d10ae5a Compare September 23, 2023 08:32

renovate Bot force-pushed the renovate/major-all branch 2 times, most recently from 946c922 to 067f891 Compare October 7, 2023 08:31

renovate Bot force-pushed the renovate/major-all branch 2 times, most recently from c0da9f7 to 5ec9331 Compare October 20, 2023 08:22

renovate Bot force-pushed the renovate/major-all branch from 5ec9331 to 7121a0e Compare November 30, 2023 05:29

renovate Bot force-pushed the renovate/major-all branch from 7121a0e to 4e852f7 Compare December 15, 2023 17:44

renovate Bot force-pushed the renovate/major-all branch 2 times, most recently from 330722d to ed1a6ba Compare January 18, 2024 20:44

renovate Bot force-pushed the renovate/major-all branch from ed1a6ba to 52e9756 Compare January 24, 2024 05:30

renovate Bot force-pushed the renovate/major-all branch 3 times, most recently from 5cc9f67 to 9ed0c02 Compare February 7, 2024 02:29

renovate Bot force-pushed the renovate/major-all branch 2 times, most recently from 2d30986 to 00826ac Compare February 18, 2024 02:34

renovate Bot force-pushed the renovate/major-all branch from 00826ac to b8e79f4 Compare February 28, 2024 08:12

renovate Bot force-pushed the renovate/major-all branch 2 times, most recently from a9582bd to 7668214 Compare March 15, 2024 00:03

renovate Bot force-pushed the renovate/major-all branch from 7668214 to 14b2691 Compare March 23, 2024 23:58

renovate Bot force-pushed the renovate/major-all branch 2 times, most recently from 587a789 to 2b18e41 Compare April 8, 2024 23:59

renovate Bot force-pushed the renovate/major-all branch 3 times, most recently from 74194c5 to 04a7ac1 Compare April 19, 2024 18:02

renovate Bot force-pushed the renovate/major-all branch 2 times, most recently from f6700ee to af88574 Compare August 11, 2024 05:43

renovate Bot force-pushed the renovate/major-all branch from af88574 to abfd9c7 Compare August 15, 2024 05:52

renovate Bot force-pushed the renovate/major-all branch from abfd9c7 to ba24d39 Compare August 23, 2024 05:44

renovate Bot force-pushed the renovate/major-all branch 2 times, most recently from 80bab3b to f435d7e Compare September 5, 2024 20:58

renovate Bot force-pushed the renovate/major-all branch from f435d7e to 3f85de6 Compare September 9, 2024 17:54

renovate Bot force-pushed the renovate/major-all branch 2 times, most recently from 3f7e9f7 to 6bb03c8 Compare September 26, 2024 03:09

renovate Bot force-pushed the renovate/major-all branch 3 times, most recently from 5b7e468 to cb94c96 Compare October 9, 2024 05:17

renovate Bot force-pushed the renovate/major-all branch 2 times, most recently from 7d76401 to da91285 Compare October 13, 2024 14:10

renovate Bot force-pushed the renovate/major-all branch from da91285 to 349337b Compare October 24, 2024 20:53

renovate Bot force-pushed the renovate/major-all branch 2 times, most recently from cee8521 to cc36d53 Compare November 12, 2024 05:05

renovate Bot force-pushed the renovate/major-all branch 3 times, most recently from 72b1b12 to f935d4c Compare November 21, 2024 20:56

renovate Bot force-pushed the renovate/major-all branch from f935d4c to 6965319 Compare November 28, 2024 02:45

renovate Bot changed the title ~~chore(deps): update all dependencies (major)~~ fix(deps): update all dependencies (major) Dec 11, 2024

renovate Bot force-pushed the renovate/major-all branch from 6965319 to 4658162 Compare December 21, 2024 03:09

renovate Bot force-pushed the renovate/major-all branch 2 times, most recently from d44f30a to 10799bf Compare January 12, 2025 02:48

renovate Bot force-pushed the renovate/major-all branch 2 times, most recently from 8bfd3d8 to 1de6cd1 Compare January 28, 2025 04:26

Navigation Menu

Update all dependencies (major) - #4

Update all dependencies (major)#4
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/major-all

renovate Bot commented Mar 16, 2023 •

edited

Loading

Uh oh!

socket-security Bot commented Apr 15, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Jun 12, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate Bot commented Mar 16, 2023 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

Enhancement

Documentation Changes

Dependency Updates

New Contributors

What's Changed

New Features

Bug Fixes & Improvements

Documentation changes

Dependency updates

New Contributors

What's Changed

Breaking Changes

Dependency Upgrades

Bug Fixes

New Contributors

What's Changed

What's Changed

Documentation changes

Dependency updates:

What's Changed

New Contributors

[v4.6.0](https://redirect.github.com/act

Configuration

Uh oh!

socket-security Bot commented Apr 15, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

socket-security Bot commented Jun 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Mar 16, 2023 •

edited

Loading

[`v4.6.0`](https://redirect.github.com/act

socket-security Bot commented Apr 15, 2026 •

edited

Loading

socket-security Bot commented Jun 12, 2026 •

edited

Loading