Skip to content

Bump the all-dependencies group with 8 updates - #4839

Merged
xiang17 merged 3 commits into
mainfrom
dependabot/gradle/all-dependencies-df5eae5dec
Aug 24, 2026
Merged

Bump the all-dependencies group with 8 updates#4839
xiang17 merged 3 commits into
mainfrom
dependabot/gradle/all-dependencies-df5eae5dec

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 24, 2026

Copy link
Copy Markdown
Contributor

Bumps the all-dependencies group with 8 updates:

Package From To
com.azure:azure-monitor-opentelemetry-autoconfigure 1.5.0 1.6.0
com.github.oshi:oshi-core 7.4.4 7.5.0
com.fasterxml.jackson:jackson-bom 2.22.1 2.22.2
com.github.spotbugs:spotbugs-annotations 4.10.3 4.10.4
com.diffplug.spotless:spotless-plugin-gradle 8.9.0 8.10.0
com.github.spotbugs.snom:spotbugs-gradle-plugin 6.5.10 6.5.11
com.diffplug.spotless 8.9.0 8.10.0
gradle-wrapper 9.7.0 9.7.1

Updates com.azure:azure-monitor-opentelemetry-autoconfigure from 1.5.0 to 1.6.0

Release notes

Sourced from com.azure:azure-monitor-opentelemetry-autoconfigure's releases.

com.azure+azure-monitor-opentelemetry-autoconfigure_1.6.0

1.6.0 (2026-08-17)

Bugs Fixed

  • Validate ingestion and Live Metrics redirect targets before following them (#50117)

Other Changes

  • Align customer-facing SDKStats configuration and custom dimension names with the stable specification. (#50056)
Commits
  • 255a2ab Update Azure Core versions for July 2020 release (#12781)
  • 7df8eaf Fixed using deprecated options bag timeout for parameter timeout, fixed missi...
  • 30dd36d mgmt regen resources, try remove beginFooWithoutPolling method (#12741)
  • 2862f26 Fix for null pointer exception with order by by array/object type (#12521)
  • 0a2f4b1 Subscription and Topic Management and Service Version (#12708)
  • a002d1c Mgmt generate (#12745)
  • 28bb0d5 network mgmt upgrade package-2019-11 (#12690)
  • 3358109 Version range needs the , at the end (#12742)
  • 053913d Move GeoJSON Types from Azure Core to Azure Core Experimental (#12731)
  • 325ec60 mgmt update sample readme doc (#12691)
  • Additional commits viewable in compare view

Updates com.github.oshi:oshi-core from 7.4.4 to 7.5.0

Release notes

Sourced from com.github.oshi:oshi-core's releases.

Release 7.5.0

New Features
  • #3614 - #3636: Adopt JSpecify nullability annotations project-wide and enforce them in continuous integration with NullAway, so every type in a signature is non-null unless it is annotated @Nullable. A method not annotated @Nullable is now a checked guarantee rather than an aspiration, and a null check against one is dead code you can delete. The public API packages and the oshi.util tree carry the marking in their package-info.java, where every consumer sees it, including on a Java 8 or classpath build; the implementation packages are marked on their module descriptors; the native mapping packages under oshi.jna and oshi.ffm.platform opt out, because nullability there is the operating system's to state rather than OSHI's. The org.jspecify:jspecify dependency is optional and compile-time only, so it does not reach your runtime classpath. See the FAQ for what this does and does not promise - @​dbwiddis.
  • #3615: Add ParseUtil.getStringValueOrEmpty, which normalizes a nullable string to "", alongside the existing getStringValueOrUnknown - @​dbwiddis.
  • #3641: Add HardwareAbstractionLayer.getVirtualization(), which identifies the hypervisor, container runtime or cloud platform hosting the system, promoting the long-standing DetectVM demo into the library. It returns an Optional<String> naming the platform, or an empty Optional when no signature matched - which means undetermined, not confirmed bare metal. Detection reads the processor's CPUID vendor string, the computer system's manufacturer and model, and network interface MAC address OUIs, in that order. The signature tables ship as the oshi.vm.properties and oshi.vmmacaddr.properties resources; placing a file of either name earlier on the classpath replaces that table, so you can teach OSHI about a platform it does not know - @​dbwiddis.
  • #3646, #3647: Add NetworkParams.getRoutes(), which returns the operating system's routing table as a list of IPRoute objects covering both address families - @​dbwiddis.
Behavior Changes
  • #3646: NetworkParams.getIpv6DefaultGateway() on OpenBSD returns the IPv6 gateway. It previously omitted the -inet6 flag and returned the IPv4 gateway. NetworkParams default gateways on AIX return an empty string when no default route is configured, matching the documented contract. They previously returned Constants.UNKNOWN.
  • #3614 - #3636: Stating each nullability contract explicitly during the JSpecify sweep surfaced implementations that did not honor it. Values that were documented as unreadable but returned null now return the sentinel the rest of the API uses. The following user-facing behavior changed:
    • DisplayInfo's preferred resolution, model and product serial number return an empty string rather than null for a synthesized display such as the Apple Silicon built-in panel.
    • SoundCard.getDriverVersion() and getCodec() return Constants.UNKNOWN rather than null when the platform reports neither, and Linux reports an unreadable ALSA driver version as Constants.UNKNOWN rather than the string not available.
    • UsbDevice.getVendor() and getUniqueDeviceId() return an empty string rather than null on Windows.
    • ComputerSystem, Baseboard and Firmware fields return Constants.UNKNOWN rather than null on AIX, Windows and the BSDs.
    • An installed application's name, version and vendor return an empty string rather than null on every platform.
    • NetworkParams.getDomainName() returns an empty string rather than null on FreeBSD.
    • A macOS process whose passwd or group entry cannot be read reports its numeric user and group id through the FFM implementation, matching JNA.
  • #3616: Report a disk's model or serial number, and a macOS partition's UUID, as Constants.UNKNOWN when it reads as an empty string, matching every other unreadable value. Affects AIX disks whose lscfg serial field is blank, and the Linux device-mapper and macOS equivalents. Partition filesystem UUIDs and labels are unchanged.
  • #3641: NetworkIF.isKnownVmMacAddr() recognizes five more prefixes, so it now returns true for a VMware interface using the 00:1C:14 allocation and for Amazon Web Services and Google Cloud Platform instances. oshi.demo.DetectVM.identifyVM() is deprecated in favor of HardwareAbstractionLayer.getVirtualization(), and now returns curated product names rather than whichever raw signature happened to match.
Bug Fixes and Improvements
  • #3589: Ship oshi-dist as a single .zip, excluding oshi-demo and its jfreechart and jackson dependencies, and attach it to each GitHub release. Test-javadoc jars and oshi-benchmark are no longer published - @​dbwiddis.
  • #3611, #3612: Log exceptions with their stack trace and cause chain rather than substituting getMessage() into the log text, and attach the underlying failure as the cause of the InstantiationException from AbstractNetworkIF and the UnsatisfiedLinkError from ForeignFunctions.dlopenWithFlags. Two Windows logs that had been losing their argument now report it - @​dbwiddis.
  • #3614 - #3636: Harden reads of incomplete platform output, found while stating the nullability contracts above. An empty line in a /proc statistics file, an AIX logical volume missing its type or partition count, a BSD ps line missing its process state, and a Solaris system with no SMBIOS section of a given type no longer throw. Windows CPU ticks are no longer reported as all zero when an optional processor utility counter is unavailable - @​dbwiddis.
  • #3639: Fix a race in the Windows GPU utilization calculation, which tested its cached previous tick sample for null and then dereferenced it in a second read, so a concurrent poll could throw a NullPointerException. That sample and the cached ADL adapter index are now volatile, as a @ThreadSafe class requires - @​dbwiddis.
  • #3643: Harden getSessions() against a corrupt utmpx entry on Linux, macOS, FreeBSD and Solaris. A single unreadable record now skips that one session instead of abandoning the native read and re-querying everything through the who command. The utmpx table is not reentrant, so a session ending while OSHI iterates it can legitimately yield a partially written entry; the who fallback now applies only when the native read returns nothing at all - @​dbwiddis.

Full change log

Changelog

Sourced from com.github.oshi:oshi-core's changelog.

7.5.0 (2026-08-16)

New Features
  • #3614, #3615, #3618, #3619, #3620, #3621, #3622, #3623, #3624, #3625, #3626, #3627, #3628, #3629, #3630, #3631, #3632, #3633, #3634, #3635, #3636: Adopt JSpecify nullability annotations project-wide and enforce them in continuous integration with NullAway, so every type in a signature is non-null unless it is annotated @Nullable. A method not annotated @Nullable is now a checked guarantee rather than an aspiration, and a null check against one is dead code you can delete. The public API packages and the oshi.util tree carry the marking in their package-info.java, where every consumer sees it, including on a Java 8 or classpath build; the implementation packages are marked on their module descriptors; the native mapping packages under oshi.jna and oshi.ffm.platform opt out, because nullability there is the operating system's to state rather than OSHI's. The org.jspecify:jspecify dependency is optional and compile-time only, so it does not reach your runtime classpath. See the FAQ for what this does and does not promise - @​dbwiddis.
  • #3615: Add ParseUtil.getStringValueOrEmpty, which normalizes a nullable string to "", alongside the existing getStringValueOrUnknown - @​dbwiddis.
  • #3641: Add HardwareAbstractionLayer.getVirtualization(), which identifies the hypervisor, container runtime or cloud platform hosting the system, promoting the long-standing DetectVM demo into the library. It returns an Optional<String> naming the platform, or an empty Optional when no signature matched - which means undetermined, not confirmed bare metal. Detection reads the processor's CPUID vendor string, the computer system's manufacturer and model, and network interface MAC address OUIs, in that order. The signature tables ship as the oshi.vm.properties and oshi.vmmacaddr.properties resources; placing a file of either name earlier on the classpath replaces that table, so you can teach OSHI about a platform it does not know - @​dbwiddis.
  • #3646, #3647: Add NetworkParams.getRoutes(), which returns the operating system's routing table as a list of IPRoute objects covering both address families - @​dbwiddis.
Behavior Changes
  • #3646: NetworkParams.getIpv6DefaultGateway() on OpenBSD returns the IPv6 gateway. It previously omitted the -inet6 flag and returned the IPv4 gateway. NetworkParams default gateways on AIX return an empty string when no default route is configured, matching the documented contract. They previously returned Constants.UNKNOWN.
  • #3614 - #3636: Stating each nullability contract explicitly during the JSpecify sweep surfaced implementations that did not honor it. Values that were documented as unreadable but returned null now return the sentinel the rest of the API uses. The following user-facing behavior changed:
    • DisplayInfo's preferred resolution, model and product serial number return an empty string rather than null for a synthesized display such as the Apple Silicon built-in panel.
    • SoundCard.getDriverVersion() and getCodec() return Constants.UNKNOWN rather than null when the platform reports neither, and Linux reports an unreadable ALSA driver version as Constants.UNKNOWN rather than the string not available.
    • UsbDevice.getVendor() and getUniqueDeviceId() return an empty string rather than null on Windows.
    • ComputerSystem, Baseboard and Firmware fields return Constants.UNKNOWN rather than null on AIX, Windows and the BSDs.
    • An installed application's name, version and vendor return an empty string rather than null on every platform.
    • NetworkParams.getDomainName() returns an empty string rather than null on FreeBSD.
    • A macOS process whose passwd or group entry cannot be read reports its numeric user and group id through the FFM implementation, matching JNA.
  • #3616: Report a disk's model or serial number, and a macOS partition's UUID, as Constants.UNKNOWN when it reads as an empty string, matching every other unreadable value. Affects AIX disks whose lscfg serial field is blank, and the Linux device-mapper and macOS equivalents. Partition filesystem UUIDs and labels are unchanged.
  • #3641: NetworkIF.isKnownVmMacAddr() recognizes five more prefixes, so it now returns true for a VMware interface using the 00:1C:14 allocation and for Amazon Web Services and Google Cloud Platform instances. oshi.demo.DetectVM.identifyVM() is deprecated in favor of HardwareAbstractionLayer.getVirtualization(), and now returns curated product names rather than whichever raw signature happened to match.

... (truncated)

Commits
  • 377d945 [maven-release-plugin] prepare release oshi-parent-7.5.0
  • 36e1f70 7.5.0 Release
  • f3ec583 Update dependency com.diffplug.spotless:spotless-maven-plugin to v3.10.0 (#3649)
  • 2bc9570 Clear the Sonar findings from the routing table work (#3648)
  • b6d943c Report the prefix length of an abbreviated network on DragonFly BSD (#3647)
  • 7f5ca26 Update dependency com.puppycrawl.tools:checkstyle to v13.11.0 (#3645)
  • 92b4372 Update dependency com.fasterxml.jackson.core:jackson-databind to v2.22.2 (#3644)
  • 6d77432 Add NetworkParams.getRoutes() routing table API (#3646)
  • 327fcf5 Skip a corrupt utmpx entry rather than abandoning the whole read (#3643)
  • a97bd07 Fix the OpenIndiana OOM failures by capping the ZFS ARC (#3642)
  • Additional commits viewable in compare view

Updates com.fasterxml.jackson:jackson-bom from 2.22.1 to 2.22.2

Commits
  • 062d76d [maven-release-plugin] prepare release jackson-bom-2.22.2
  • dcf18f7 Prep for 2.22.2 release
  • 9688c7b Merge branch '2.21' into 2.22
  • 7796a7d Merge branch '2.20' into 2.21
  • d3cd7fc Merge branch '2.19' into 2.20
  • 7a28068 Merge branch '2.18' into 2.19
  • 51eb465 Post-release dep version bump
  • 34ff5e8 [maven-release-plugin] prepare for next development iteration
  • 0b44a45 [maven-release-plugin] prepare release jackson-bom-2.18.10
  • 691ec93 Prep for 2.18.10 release
  • Additional commits viewable in compare view

Updates com.github.spotbugs:spotbugs-annotations from 4.10.3 to 4.10.4

Release notes

Sourced from com.github.spotbugs:spotbugs-annotations's releases.

4.10.4

SpotBugs 4.10.4

CHANGELOG

CHECKSUM

file checksum (sha256)
spotbugs-4.10.4-javadoc.jar 06bfc9ccdcfb9b594b5053817199b9489dff6312dc35c8864faa9b9357cf5be4
spotbugs-4.10.4-sources.jar d087c11e3b0714e8445b29f2bef9bb4c62b4ee13ad67caf7a4b64d61e82ea400
spotbugs-4.10.4.tgz 72bc0d4edd686e462c0f71f42a049b27bf4da6708797ff7b2b56dd202714b4e5
spotbugs-4.10.4.zip 771c8702beb2b4b6aa20df87ea85f22fda7280c7ce36fce4077b7b3c076d1e14
spotbugs-annotations-4.10.4-javadoc.jar 0fc9d3c529c6ee93aeddf9cfbd4b1438708e37fd53b5157aa47070446fbc7303
spotbugs-annotations-4.10.4-sources.jar 87974d23caffbc8c6e66c567747627267b5ed06573cee966d7af6d236b8d65bd
spotbugs-annotations.jar 28fa4befaddce5d7b79b07c68e7c12fa27c5d9282c4229528717971606661ea3
spotbugs-ant-4.10.4-javadoc.jar eaa1ee0a4e004b7b12e2dfc65290c6324effff6ffc0e7b7ee94c98875997e51c
spotbugs-ant-4.10.4-sources.jar af1c78c8e194c2f82ea3e0517ab38a5eb6ba608c8d0e776c9097605d6b7efca6
spotbugs-ant.jar 9ec240477b7c87270be7dfe3196180cd3763f04c369e5691feeb12e66110a065
spotbugs.jar a88cad2e0ea9bb74b908ce82ae89416c61fa8f8ea5cfcc9368b1baac2da878d2
test-harness-4.10.4-javadoc.jar c1ff7bcd0c4f61f4356ae9734be34567df680175651a3104fdee241e324d6df7
test-harness-4.10.4-sources.jar 805d2d124b0d4ea513ee9262d4ad6027c3471d45defd80fd7d20e23425d17df7
test-harness-4.10.4.jar bd10d1f11a1b93e4ca4db4d27772f611bd3407f9452dbbd2d1ba62584ddc171f
test-harness-core-4.10.4-javadoc.jar ac735a1508609001d122a91e43f6dfb10c4c691cf555d5ba386f216df904ac9b
test-harness-core-4.10.4-sources.jar 043a55d99a517c0d9cf702b0c183b4afd3f03af9eff4a86d59bb37df1b35b532
test-harness-core-4.10.4.jar 1f9a0ee8f150dd71f960ca4f59dcf7912a45d0e9e6aefc4585fd44b975454bc0
test-harness-jupiter-4.10.4-javadoc.jar c9554b4a6509d0d24c6436b6e01171eb8e71fca96df6edf8f80c7b51ab5bda16
test-harness-jupiter-4.10.4-sources.jar 17144f315686bfd01c02fa4ae7c916060c41de8eed58d5b8470416fa08f46ced
test-harness-jupiter-4.10.4.jar a91146da3e993479cfefd2690781cbd102c6360ecc63a96d88995be3bd60fcbb
Changelog

Sourced from com.github.spotbugs:spotbugs-annotations's changelog.

4.10.4 - 2026-08-19

Fixed

  • Fix NN_NAKED_NOTIFY false negatives when a field read is stored in a local variable before notify() or notifyAll() (#3884)
  • Fix ASE_ASSERTION_WITH_SIDE_EFFECT and ASE_ASSERTION_WITH_SIDE_EFFECT_METHOD false positives in every method analysed after a method that reads $assertionsDisabled without throwing an AssertionError (#3483)
  • Fix INT_BAD_COMPARISON_WITH_SIGNED_BYTE false positive for meaningful comparisons of a signed byte with 127 (b < 127, b >= 127) (#4201)
  • Fix EI_EXPOSE_REP false negative for public getters in anonymous classes (#4237)
  • Fix missing class report for java.util.Collections$EmptyNavigableSet and java.util.Collections$EmptyNavigableMap when the result of Collections.emptySortedSet(), emptyNavigableSet(), emptySortedMap() or emptyNavigableMap() is stored (#4244)
  • Fix URF_UNREAD_FIELD false negative for unread instance fields declared in enums (#4246)
  • Stop publishing global dependency-management constraints to consumer POMs. (#4223)
Commits
  • 1a58a48 release v4.10.4
  • 160d4a6 Gradle build cleanup (#4255)
  • 2354168 Fix EI_EXPOSE_REP not reported for anonymous-class getters (#4237)
  • 4895bce Fix naked notify detection after local stores (#4245)
  • 28348e5 Fixes #3955 : Fix URF_UNREAD_FIELD false negative for unread fields i… (#4246)
  • 3ec259e chore(build): Add changelog regarding dependency management constraints remov...
  • 33075ce Remove eclipse table latest as noted version 3.1 that is long retired and dis...
  • 1bf27d8 Update Gradle to v9.7.1 (#4252)
  • ee61d5b Update dependency com.google.guava:guava to v33.7.1-jre (#4250)
  • f352226 Update plugin com.diffplug.spotless to v8.10.0 (#4249)
  • Additional commits viewable in compare view

Updates com.diffplug.spotless:spotless-plugin-gradle from 8.9.0 to 8.10.0

Release notes

Sourced from com.diffplug.spotless:spotless-plugin-gradle's releases.

Gradle Plugin v8.10.0

Added

  • New shortenFullyQualifiedTypes() step for Java, which replaces fully-qualified type names with their simple names and adds the imports they need. Best combined with importOrder() and removeUnusedImports(). (#2945)
  • Add embedded lockfiles to Eclipse JDT for every supported version (4.9 through 4.40), so eclipse() resolves from Maven Central instead of querying a P2 update site. Versions without an embedded lockfile still fall back to P2 provisioning. (#1996)

Fixed

  • removeUnusedImports no longer fails on Java import module declarations. (#2890)
  • expandWildcardImports() now builds its type-solver classpath from each Java source set's compile classpath instead of every resolvable configuration. Unrelated configurations (for example generated-code or custom resolvable configs that are not ready yet) are no longer resolved. (#2998)
  • spotlessCheck violation message now suggests the correct composite/included-build task path (e.g. ./gradlew :my-utils:spotlessApply) instead of a bare spotlessApply / :spotlessApply that does not select included-build tasks. (#2421)
  • Parallel multi-project builds no longer intermittently fail with "Cannot fingerprint input property 'stepsInternalEquality': ConfigurationCacheHackList cannot be serialized" / "Failed to provision P2 dependencies" when using eclipse() (or other P2-backed steps). Subprojects now share one deduping P2 provisioner and P2 queries are serialized process-wide. (#3004)

Changes

  • Default google-java-format remains 1.28.0 on JVM 17; bumps to 1.30.0 on JVM 21+; require at least 1.30.0 on JVM 25+ for import module support.
  • Bump default eclipse version to latest 4.39 -> 4.40. (#1996)
  • Bump default adocfmt version 0.2.0 -> 0.3.1, which adds table formatting support (formatTables, tableLayout, tableMaxLineWidth, tableBlankLines).
Commits
  • 2fd42ea Published gradle/8.10.0
  • d71ed1a Published lib/4.10.0
  • 8b57c01 Add shortenFullyQualifiedTypes step (fixes #2945) (#3005 closes #2945)
  • 6b42c5e fix: make the FQN-collecting visitor a named static class
  • 4430823 Better organization on the changelogs.
  • 45bea6d Better place to put the shortenFullyQualifiedTypes docs
  • 0c49e65 chore: spotlessApply
  • 1c5bc0a docs: list the Java import steps in the plugin README tables of contents
  • cd57b58 docs: document shortenFullyQualifiedTypes in the plugin READMEs
  • b395fd1 docs: changelog entries and README matrix row for shortenFullyQualifiedTypes
  • Additional commits viewable in compare view

Updates com.github.spotbugs.snom:spotbugs-gradle-plugin from 6.5.10 to 6.5.11

Release notes

Sourced from com.github.spotbugs.snom:spotbugs-gradle-plugin's releases.

6.5.11

6.5.11 (2026-08-20)

Bug Fixes

  • deps: update dependency com.github.spotbugs:spotbugs to v4.10.4 (#1793) (8f97f0b)
Commits
  • 8f97f0b fix(deps): update dependency com.github.spotbugs:spotbugs to v4.10.4 (#1793)
  • 963d8ba chore(deps): update plugin com.diffplug.spotless to v8.10.0 (#1792)
  • f5809b2 chore(deps): update dependency com.diffplug.spotless:spotless-plugin-gradle t...
  • 9f8ab47 chore(deps): lock file maintenance (#1790)
  • 8409afc chore(deps): update commitlint monorepo to v21.2.2 (#1789)
  • 5d3f9d6 chore(deps): update dependency conventional-changelog-conventionalcommits to ...
  • 48e8035 chore(deps): update github/codeql-action action to v4.37.7 (#1787)
  • b6b864e chore(deps): lock file maintenance (#1785)
  • 2daf3fa chore(deps): update dependency semantic-release to v25.0.9 (#1783)
  • 34da3b2 chore(deps): update jamesives/github-pages-deploy-action action to v4.9.0 (#1...
  • Additional commits viewable in compare view

Updates com.diffplug.spotless from 8.9.0 to 8.10.0

Updates gradle-wrapper from 9.7.0 to 9.7.1

Release notes

Sourced from gradle-wrapper's releases.

9.7.1

The Gradle team is excited to announce Gradle 9.7.1.

This is a patch release for 9.7.0. We recommend using 9.7.1 instead of 9.7.0.

Here are the highlights of 9.7.0 release:

  • Isolated Projects graduates to incubating
  • Broader Configuration Cache compatibility
  • Resilient Sync helps you fix broken builds
  • More source locations in problem reports

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle: Adam, Aman Gautam, Aman Kumar, Anton Dubrouski, Aurimas, gbhavya07, Josh Friend, nicklauslittle-gov, Pragati, project516, Qin Mi, Ravi, sk-reddy17, Suvrat Acharya, Yongshun Ye.

Upgrade instructions

Switch your build to use Gradle 9.7.1 by updating your wrapper:

./gradlew :wrapper --gradle-version=9.7.1 && ./gradlew :wrapper

See the Gradle 9.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines. If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the all-dependencies group with 8 updates:

| Package | From | To |
| --- | --- | --- |
| [com.azure:azure-monitor-opentelemetry-autoconfigure](https://github.com/Azure/azure-sdk-for-java) | `1.5.0` | `1.6.0` |
| [com.github.oshi:oshi-core](https://github.com/oshi/oshi) | `7.4.4` | `7.5.0` |
| [com.fasterxml.jackson:jackson-bom](https://github.com/FasterXML/jackson-bom) | `2.22.1` | `2.22.2` |
| [com.github.spotbugs:spotbugs-annotations](https://github.com/spotbugs/spotbugs) | `4.10.3` | `4.10.4` |
| [com.diffplug.spotless:spotless-plugin-gradle](https://github.com/diffplug/spotless) | `8.9.0` | `8.10.0` |
| [com.github.spotbugs.snom:spotbugs-gradle-plugin](https://github.com/spotbugs/spotbugs-gradle-plugin) | `6.5.10` | `6.5.11` |
| com.diffplug.spotless | `8.9.0` | `8.10.0` |
| [gradle-wrapper](https://github.com/gradle/gradle) | `9.7.0` | `9.7.1` |


Updates `com.azure:azure-monitor-opentelemetry-autoconfigure` from 1.5.0 to 1.6.0
- [Release notes](https://github.com/Azure/azure-sdk-for-java/releases)
- [Commits](Azure/azure-sdk-for-java@azure-json_1.5.0...azure-core_1.6.0)

Updates `com.github.oshi:oshi-core` from 7.4.4 to 7.5.0
- [Release notes](https://github.com/oshi/oshi/releases)
- [Changelog](https://github.com/oshi/oshi/blob/master/CHANGELOG.md)
- [Commits](oshi/oshi@oshi-parent-7.4.4...oshi-parent-7.5.0)

Updates `com.fasterxml.jackson:jackson-bom` from 2.22.1 to 2.22.2
- [Commits](FasterXML/jackson-bom@jackson-bom-2.22.1...jackson-bom-2.22.2)

Updates `com.github.spotbugs:spotbugs-annotations` from 4.10.3 to 4.10.4
- [Release notes](https://github.com/spotbugs/spotbugs/releases)
- [Changelog](https://github.com/spotbugs/spotbugs/blob/master/CHANGELOG.md)
- [Commits](spotbugs/spotbugs@4.10.3...4.10.4)

Updates `com.diffplug.spotless:spotless-plugin-gradle` from 8.9.0 to 8.10.0
- [Release notes](https://github.com/diffplug/spotless/releases)
- [Changelog](https://github.com/diffplug/spotless/blob/main/CHANGES.md)
- [Commits](diffplug/spotless@gradle/8.9.0...gradle/8.10.0)

Updates `com.github.spotbugs.snom:spotbugs-gradle-plugin` from 6.5.10 to 6.5.11
- [Release notes](https://github.com/spotbugs/spotbugs-gradle-plugin/releases)
- [Commits](spotbugs/spotbugs-gradle-plugin@6.5.10...6.5.11)

Updates `com.diffplug.spotless` from 8.9.0 to 8.10.0

Updates `gradle-wrapper` from 9.7.0 to 9.7.1
- [Release notes](https://github.com/gradle/gradle/releases)
- [Commits](gradle/gradle@v9.7.0...v9.7.1)

---
updated-dependencies:
- dependency-name: com.azure:azure-monitor-opentelemetry-autoconfigure
  dependency-version: 1.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: com.github.oshi:oshi-core
  dependency-version: 7.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: com.fasterxml.jackson:jackson-bom
  dependency-version: 2.22.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: com.github.spotbugs:spotbugs-annotations
  dependency-version: 4.10.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: com.diffplug.spotless:spotless-plugin-gradle
  dependency-version: 8.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: com.github.spotbugs.snom:spotbugs-gradle-plugin
  dependency-version: 6.5.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: com.diffplug.spotless
  dependency-version: 8.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: gradle-wrapper
  dependency-version: 9.7.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Aug 24, 2026
@dependabot dependabot Bot added the java Pull requests that update Java code label Aug 24, 2026
@xiang17
xiang17 enabled auto-merge (squash) August 24, 2026 19:58
@xiang17
xiang17 merged commit ec1c976 into main Aug 24, 2026
146 checks passed
@xiang17
xiang17 deleted the dependabot/gradle/all-dependencies-df5eae5dec branch August 24, 2026 19:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant