Bump the routine-maven-updates group with 5 updates

[dependabot]

Bumps the routine-maven-updates group with 5 updates:

Package	From	To
nl.hauntedmc.platform:haunted-library-parent	1.5.0	1.6.4
org.hibernate.orm:hibernate-core	7.4.5.Final	7.4.6.Final
org.mongodb:mongodb-driver-sync	5.10.0	5.11.0
redis.clients:jedis	8.0.0	8.0.1
com.velocitypowered:velocity-api	4.1.0-SNAPSHOT	4.1.1

Updates nl.hauntedmc.platform:haunted-library-parent from 1.5.0 to 1.6.4

Updates org.hibernate.orm:hibernate-core from 7.4.5.Final to 7.4.6.Final

Release notes

Sourced from org.hibernate.orm:hibernate-core's releases.

Release 7.4.6

Hibernate ORM 7.4.6.Final released

Today, we published a new release of Hibernate ORM 7.4: 7.4.6.Final.

You can find the full list of 7.4.6.Final changes here.

What's new

• See the website for requirements and compatibilities.
• See the What's New guide for details about new features and capabilities.
• See the Migration Guide for details about migration.

Conclusion

For additional details, see:

• the release page
• the Migration Guide
• the Introduction Guide
• the User Guide
• the API docs

See also the following resources related to supported APIs:

• the compatibility policy
• the incubating API report (@Incubating)
• the deprecated API report (@Deprecated + @Remove)
• the internal API report (internal packages, @Internal)

Visit the website for details on getting in touch with us.

Changelog

Sourced from org.hibernate.orm:hibernate-core's changelog.

Changes in 7.4.6.Final (August 23, 2026)

https://hibernate.atlassian.net/projects/HHH/versions/40133

** Bug * HHH-20788 [Quarkus 3.20.5 / Hibernate ORM 6.6.40.Final] quarkus.otel.logs.enabled=true fails SessionFactory build for TABLE_PER_CLASS collections * HHH-20783 hibernate.transactions{result="failure"} metric can transiently go negative due to non-atomic counter reads, breaking the whole Prometheus scrape on Micrometer 1.14+ * HHH-20779 Envers: unwrap proxies in collection-change audit work units * HHH-20776 CriteriaBuilder.literal() mistypes an enum constant declared with a class body * HHH-20772 ARRAY_AGG column in Jakarta Data query method cannot be mapped to result type property * HHH-20743 hibernate-maven-plugin enhance goal computes wrong class names when fileSets directory differs from classesDirectory * HHH-20707 Missing import for inner interface type in CDI accessor metamodel methods * HHH-20696 Implicit name of list index columns not applied by MetadataBuilder * HHH-20661 HQL UNION fails when unioning java.util.Date from different attribute paths * HHH-20624 StackOverflowError when creating entity manager with attribute converter hierarchy with generic parameter * HHH-20515 Adjust default for SessionCheckMode on Session.findMultiple() * HHH-20472 Generated metamodel class missing List import * HHH-20452 @​OneToMany mapping silently dropped when orm.xml contributes a partial overlay (entity-listeners only) to an entity whose @​Id is inherited from a @​MappedSuperclass * HHH-20438 Basic-array body predicates fail with AssertionError from SqmMappingModelHelper.resolveSqmPath * HHH-20348 DataException / ClassCastException when aggregating primitive

** Task * HHH-20736 Tune the content of javadocs to reduce the size of files published to Maven Central * HHH-20710 Update to hibernate-models 1.1.2

Commits

• 43e2e9a [Jenkins release job] Preparing release 7.4.6.Final
• cd34e60 [Jenkins release job] changelog.txt updated by release build 7.4.6.Final
• 229571c HHH-20710 Add test for generic Map subtype resolution with JSON mapping
• de419ce HHH-20710 Update to hibernate-models 1.1.2
• 284a4be HHH-20788 Return null for TablePerSubclass and clarify informational nature o...
• f74ba58 Make testsuite fit for JDK 28 Valhalla preview
• 33465fe Add JDK 28 to the testing JDK list
• 5e398fd Skip some tests causing nightly failures on MySQL due to a bug
• cf53ffa HHH-20783 Add a dedicated failed-transactions counter to Statistics
• f4e0be3 HHH-20772 add @​Incubating to new Processor options
• Additional commits viewable in compare view

Updates org.mongodb:mongodb-driver-sync from 5.10.0 to 5.11.0

Release notes

Sourced from org.mongodb:mongodb-driver-sync's releases.

Java Driver 5.11.0 (August 28, 2026)

What's Changed

• Java 6173 CSFLE/QE Support for HTTP Proxies by @​strogiyotec in mongodb/mongo-java-driver#2043

CSFLE/QE Http proxies notes

• The driver always negotiates TLS with the KMS host itself, using the SSLContext configured for the KMS provider. Implementations must not negotiate TLS with the KMS host; doing so would let an intermediary read the key material in transit.
• An implementation may use TLS for its own connection to the intermediary, in which case it returns an SSLSocket and the driver layers the KMS host's TLS session on top of it.
• Ownership of the returned socket passes to the driver, which closes it when the KMS request completes. A socket that is never returned must be closed by the implementation.
• Applicable only to the synchronous driver. The reactive streams driver rejects(RuntimeException) a configured callback.

Code example

Code example uses only the JDK API , so no HTTP client dependency is required. If you use your own HTTP client, it must return the tunnelled socket without negotiating TLS with the KMS host

First define the callback

private static final String PROXY_HOST = "proxy.example.com";
private static final int PROXY_PORT = 8080;
private static final int TIMEOUT_MILLIS = 10_000;
// Routes every KMS request through an HTTP proxy using the HTTP CONNECT method

// refer to the docs https://www.rfc-editor.org/info/rfc9110/#section-9.3.6

KmsConnectCallback proxyCallback = context -> {

Socket socket = new Socket();

try {

// 1. Connect to the proxy, not to the KMS host.

socket.connect(new InetSocketAddress(PROXY_HOST, PROXY_PORT), TIMEOUT_MILLIS);

socket.setSoTimeout(TIMEOUT_MILLIS);
    // 2. Ask the proxy to open a tunnel to the KMS host the driver wants to reach. Only the
    //    driver knows which host that is, so always take it from the context rather than
    //    hard-coding it.
    String target = context.getHost() + ":" + context.getPort();
    String connectRequest = "CONNECT " + target + " HTTP/1.1\r\n"
            + "Host: " + target + "\r\n"
            // If the proxy requires authentication, add the appropriate header, for example:
            // + "Proxy-Authorization: Basic " + base64("user:password") + "\r\n"
            + "\r\n";
    socket.getOutputStream().write(connectRequest.getBytes(StandardCharsets.US_ASCII));
// 3. Check the proxy accepted the tunnel before handing the socket back.
checkProxyAcceptedTunnel(socket.getInputStream());

} catch (IOException | RuntimeException e) {

// The driver never received this socket, so it cannot close it for you.

socket.close();

throw e;


</tr></table>

... (truncated)

Commits

• c96aad1 Version: bump 5.11.0
• 027d4cc CSFLE/QE Support for HTTP Proxies (#2043)
• 9af9be1 Version: bump 5.11.0-SNAPSHOT
• See full diff in compare view

Updates redis.clients:jedis from 8.0.0 to 8.0.1

Release notes

Sourced from redis.clients:jedis's releases.

8.0.1

Jedis 8.0.1 is a maintenance release for the 8.0 line, fixing stale cluster topology after failover in JedisCluster.

Changes

🐛 Bug Fixes

• Refresh primaryNodesCache in JedisClusterInfoCache.discoverClusterSlots (#4692, backported in #4694)

Contributors

We'd like to thank all the contributors who worked on this release!

@​insaf021

Full Changelog: redis/jedis@v8.0.0...v8.0.1

Commits

• 50ec1c8 Backport #4692 to 8.0.x: refresh primaryNodesCache in JedisClusterInfoCache.d...
• 36135a0 Point snapshot example at 8.0.1-SNAPSHOT on the 8.x branch
• 2de1a6d List Redis 8.6, 8.8 and 8.10 as supported in README
• fcf59cd Update version references in README and docs for 8.0.0
• 8d539c0 Bump snapshot version to 8.0.1
• See full diff in compare view

Updates com.velocitypowered:velocity-api from 4.1.0-SNAPSHOT to 4.1.1

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions