Skip to content

Bump the maven-dependencies group across 1 directory with 2 updates - #237

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/maven-dependencies-448ed273c4
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/maven-dependencies-448ed273c4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 13, 2026

Copy link
Copy Markdown
Contributor

Bumps the maven-dependencies group with 2 updates in the / directory: com.github.siom79.japicmp:japicmp and org.apache.httpcomponents.client5:httpclient5.

Updates com.github.siom79.japicmp:japicmp from 0.26.2 to 0.26.3

Release notes

Sourced from com.github.siom79.japicmp:japicmp's releases.

japicmp-base-0.26.3

  • Filter classes modified by hidden members #529
Commits
  • 799bac6 [maven-release-plugin] prepare release japicmp-base-0.26.3
  • 6912bfe upgraded version in *.md files to 0.26.3
  • 41e9beb Add release notes for version 0.26.3
  • 58fa5bd Merge pull request #529 from siom79/filter-classes-modified-by-hidden-members
  • 1226307 Add tests for class change status of members below the access modifier
  • 2c7477f Respect access modifier when evaluating the change status of a class
  • b556f9e Filter classes that are only modified by elements hidden in the output
  • 828c558 Merge pull request #528 from siom79/release-v0.26.2
  • 71a8617 [maven-release-plugin] prepare for next development iteration
  • See full diff in compare view

Updates org.apache.httpcomponents.client5:httpclient5 from 5.6.4 to 5.6.5

Changelog

Sourced from org.apache.httpcomponents.client5:httpclient5's changelog.

Release 5.6.5

This maintenance release fixes several defects found since the previous release including the defect in the async Brotli decompression code that can cause the message exchange to hang indefinitely. It also upgrades HttpCore to version 5.4.4.

Change Log

  • Upgraded HttpCore to version 5.4.4. Contributed by Oleg Kalnichevski

  • HTTPCLIENT-2433: Prevent concurrent HTTP/2 request body replay. Contributed by Matthias Kurz <m.kurz at irregular.at>

  • HTTPCLIENT-2432: Fixed connection-pool leak in ResponseEntityProxy#cleanup() when runtime #disconnectEndpoint throws an exception (#883). Contributed by Victor Alekseev

  • Decode punycode public suffixes in PublicSuffixMatcher#verify (#876). Contributed by Javid Khan

  • Fixed Brotli decompression hang with large input buffers. Contributed by Arturo Bernal

  • HTTP cache to treat malformed delta-seconds as absent. Contributed by Arturo Bernal Javid Khan

  • Bug-fix: ResponseCachingPolicy incorrectly applies neverCache1_1ResponsesWithQueryString config parameter. This config parameter and related functionality will be deprecated in the next feature release and removed in the future. Contributed by Oleg Kalnichevski

  • Removed invalid request version check from ResponseCachingPolicy. Contributed by Oleg Kalnichevski

  • Fixed resource leaking on error in AsyncCachingExec Contributed by Jeremie Bolduc <16137441+Jouramie at users.noreply.github.com>

Commits
  • e6970b4 HttpClient 5.6.5 release
  • d0ff6ec Updated release notes for HttpClient 5.6.5 release
  • 03a2abc Upgraded HttpCore to version 5.4.4
  • 7ed9d66 HTTPCLIENT-2433: Prevent concurrent HTTP/2 request body replay
  • bd278a6 Improved connection expiry and eviction example
  • 02f11eb HTTPCLIENT-2432: fix connection-pool leak in ResponseEntityProxy.cleanup() wh...
  • 8e45f17 decode punycode public suffixes in PublicSuffixMatcher.verify (#876)
  • 6d8319a Fix Brotli decompression hang with large input buffers
  • 908ccc1 treat malformed delta-seconds as absent in deltaSeconds
  • 815043a Moved timeout and stale connection related integration tests into separate gr...
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the maven-dependencies group with 2 updates in the / directory: [com.github.siom79.japicmp:japicmp](https://github.com/siom79/japicmp) and [org.apache.httpcomponents.client5:httpclient5](https://github.com/apache/httpcomponents-client).


Updates `com.github.siom79.japicmp:japicmp` from 0.26.2 to 0.26.3
- [Release notes](https://github.com/siom79/japicmp/releases)
- [Changelog](https://github.com/siom79/japicmp/blob/master/release.py)
- [Commits](siom79/japicmp@japicmp-base-0.26.2...japicmp-base-0.26.3)

Updates `org.apache.httpcomponents.client5:httpclient5` from 5.6.4 to 5.6.5
- [Changelog](https://github.com/apache/httpcomponents-client/blob/rel/v5.6.5/RELEASE_NOTES.txt)
- [Commits](apache/httpcomponents-client@rel/v5.6.4...rel/v5.6.5)

---
updated-dependencies:
- dependency-name: com.github.siom79.japicmp:japicmp
  dependency-version: 0.26.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.apache.httpcomponents.client5:httpclient5
  dependency-version: 5.6.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from jmanico as a code owner October 13, 2026 03:21
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 13, 2026
@dependabot
dependabot Bot requested a review from jeremylong as a code owner October 13, 2026 03:21
@dependabot dependabot Bot added the java Pull requests that update java code label Oct 13, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants