Bump the maven group across 36 directories with 12 updates by dependabot[bot] · Pull Request #501 · jairmyree/azure-sdk-for-java

dependabot · 2026-08-08T04:46:33Z

Bumps the maven group with 1 update in the /sdk/batch/microsoft-azure-batch directory: com.fasterxml.jackson.core:jackson-core.
Bumps the maven group with 1 update in the /sdk/clientcore/annotation-processor-test directory: com.fasterxml.jackson.core:jackson-databind.
Bumps the maven group with 1 update in the /sdk/clientcore/core directory: com.fasterxml.jackson.core:jackson-databind.
Bumps the maven group with 4 updates in the /sdk/clientcore/http-netty4 directory: com.fasterxml.jackson.core:jackson-databind, io.netty:netty-codec, io.netty:netty-codec-http and io.netty:netty-codec-http2.
Bumps the maven group with 1 update in the /sdk/clientcore/http-okhttp3 directory: com.fasterxml.jackson.core:jackson-databind.
Bumps the maven group with 1 update in the /sdk/core-v2/azure-core-test directory: com.fasterxml.jackson.core:jackson-databind.
Bumps the maven group with 2 updates in the /sdk/core/azure-core directory: com.fasterxml.jackson.core:jackson-core and com.fasterxml.jackson.core:jackson-databind.
Bumps the maven group with 1 update in the /sdk/core/azure-core-http-jdk-httpclient directory: com.fasterxml.jackson.core:jackson-databind.
Bumps the maven group with 4 updates in the /sdk/core/azure-core-http-netty directory: com.fasterxml.jackson.core:jackson-databind, io.netty:netty-codec, io.netty:netty-codec-http and io.netty:netty-codec-http2.
Bumps the maven group with 1 update in the /sdk/core/azure-core-http-okhttp directory: com.fasterxml.jackson.core:jackson-databind.
Bumps the maven group with 1 update in the /sdk/core/azure-core-http-vertx directory: com.fasterxml.jackson.core:jackson-databind.
Bumps the maven group with 2 updates in the /sdk/core/azure-core-serializer-json-jackson directory: com.fasterxml.jackson.core:jackson-core and com.fasterxml.jackson.core:jackson-databind.
Bumps the maven group with 2 updates in the /sdk/core/azure-core-version-tests directory: com.fasterxml.jackson.core:jackson-core and com.fasterxml.jackson.core:jackson-databind.
Bumps the maven group with 2 updates in the /sdk/cosmos/azure-cosmos directory: com.fasterxml.jackson.core:jackson-databind and io.micrometer:micrometer-core.
Bumps the maven group with 2 updates in the /sdk/cosmos/azure-cosmos-benchmark directory: com.fasterxml.jackson.core:jackson-databind and io.micrometer:micrometer-core.
Bumps the maven group with 1 update in the /sdk/cosmos/azure-cosmos-spark-account-data-resolver-sample directory: com.fasterxml.jackson.core:jackson-databind.
Bumps the maven group with 2 updates in the /sdk/cosmos/azure-cosmos-spark_3 directory: com.fasterxml.jackson.core:jackson-databind and io.micrometer:micrometer-core.
Bumps the maven group with 2 updates in the /sdk/cosmos/azure-cosmos-spark_3-3_2-12 directory: com.fasterxml.jackson.core:jackson-databind and io.micrometer:micrometer-core.
Bumps the maven group with 2 updates in the /sdk/cosmos/azure-cosmos-spark_3-4_2-12 directory: com.fasterxml.jackson.core:jackson-databind and io.micrometer:micrometer-core.
Bumps the maven group with 2 updates in the /sdk/cosmos/azure-cosmos-spark_3-5 directory: com.fasterxml.jackson.core:jackson-databind and io.micrometer:micrometer-core.
Bumps the maven group with 2 updates in the /sdk/cosmos/azure-cosmos-spark_4 directory: com.fasterxml.jackson.core:jackson-databind and io.micrometer:micrometer-core.
Bumps the maven group with 1 update in the /sdk/cosmos/fabric-cosmos-spark-auth_3 directory: com.fasterxml.jackson.core:jackson-databind.
Bumps the maven group with 1 update in the /sdk/keyvault/azure-security-test-keyvault-jca directory: com.fasterxml.jackson.core:jackson-databind.
Bumps the maven group with 2 updates in the /sdk/modelsrepository/azure-iot-modelsrepository directory: com.fasterxml.jackson.core:jackson-core and com.fasterxml.jackson.core:jackson-databind.
Bumps the maven group with 2 updates in the /sdk/openai/azure-ai-openai-realtime directory: com.fasterxml.jackson.core:jackson-databind and io.netty:netty-codec-http.
Bumps the maven group with 1 update in the /sdk/parents/azure-client-sdk-parent directory: com.fasterxml.jackson.core:jackson-databind.
Bumps the maven group with 1 update in the /sdk/parents/azure-client-sdk-parent-v2 directory: com.fasterxml.jackson.core:jackson-databind.
Bumps the maven group with 1 update in the /sdk/parents/clientcore-parent directory: com.fasterxml.jackson.core:jackson-databind.
Bumps the maven group with 2 updates in the /sdk/serialization/azure-json directory: com.fasterxml.jackson.core:jackson-core and com.fasterxml.jackson.core:jackson-databind.
Bumps the maven group with 4 updates in the /sdk/spring/azure-spring-data-cosmos directory: com.fasterxml.jackson.core:jackson-databind, org.springframework:spring-core, org.springframework.data:spring-data-commons and org.springframework:spring-expression.
Bumps the maven group with 2 updates in the /sdk/spring/spring-cloud-azure-feature-management directory: com.fasterxml.jackson.core:jackson-databind and io.projectreactor.netty:reactor-netty.
Bumps the maven group with 2 updates in the /sdk/spring/spring-cloud-azure-feature-management-web directory: com.fasterxml.jackson.core:jackson-databind and org.springframework:spring-webmvc.
Bumps the maven group with 4 updates in the /sdk/spring/spring-messaging-azure directory: com.fasterxml.jackson.core:jackson-databind, io.micrometer:micrometer-core, org.springframework.data:spring-data-commons and org.springframework.retry:spring-retry.
Bumps the maven group with 4 updates in the /sdk/spring/spring-messaging-azure-eventhubs directory: com.fasterxml.jackson.core:jackson-databind, io.micrometer:micrometer-core, org.springframework.data:spring-data-commons and org.springframework.retry:spring-retry.
Bumps the maven group with 4 updates in the /sdk/spring/spring-messaging-azure-servicebus directory: com.fasterxml.jackson.core:jackson-databind, io.micrometer:micrometer-core, org.springframework.data:spring-data-commons and org.springframework.retry:spring-retry.
Bumps the maven group with 2 updates in the /sdk/webpubsub/azure-messaging-webpubsub-client directory: com.fasterxml.jackson.core:jackson-databind and io.netty:netty-codec-http.

Updates com.fasterxml.jackson.core:jackson-core from 2.18.6 to 2.18.9

Commits

66c7667 [maven-release-plugin] prepare release jackson-core-2.18.9
0c59c3c Prep for 2.18.9 release
ada244d Post-release dep version bump
52f69d3 [maven-release-plugin] prepare for next development iteration
899d70a [maven-release-plugin] prepare release jackson-core-2.18.8
a006b52 Prep for 2.18.8 release
88e3941 Add back JDK 11 in CI
1665ef1 Fix release notes
4cdd529 Apply number-length validator on streaming integer path of async parser (#1611)
cd4d6b2 Post-release dep version bump
Additional commits viewable in compare view

Updates com.fasterxml.jackson.core:jackson-databind from 2.18.6 to 2.18.9

Commits

See full diff in compare view

Updates com.fasterxml.jackson.core:jackson-databind from 2.18.6 to 2.18.9

Commits

See full diff in compare view

Updates com.fasterxml.jackson.core:jackson-databind from 2.18.6 to 2.18.9

Commits

See full diff in compare view

Updates io.netty:netty-codec from 4.1.132.Final to 4.1.136.Final

Release notes

Sourced from io.netty:netty-codec's releases.

netty-4.1.136.Final

What's Changed

SingleThreadEventExecutor: document Throwable safety contract on run() by @daguimu in netty/netty#16814

Make HTTP/2 frame hashCode consistent with equals by @daguimu in netty/netty#16692

Add BlockHound exception for DnsQueryIdSpace (#16896) by @chrisvest in netty/netty#16915

FlowControlHandler: Fix autoRead behavior by @chrisvest in netty/netty#16912

Auto-port 4.1: Fix incorrect bounds in error message of HpackDecoder.setMaxHeaderListSize by @netty-project-bot in netty/netty#16911

MQTT: Fix MQTT decoder size check after variable header replay by @daguimu in netty/netty#16916

MQTT: Make the decodeProperties early-REPLAY check actually fire by @daguimu in netty/netty#16813

Reject control characters at the boundary of HTTP method names (#16723) by @chrisvest in netty/netty#16933

Auto-port 4.1: Update to latest tcnative release by @netty-project-bot in netty/netty#16941

Auto-port 4.1: Fix HTTP 2 PUSH_PROMISE stream association validation by @netty-project-bot in netty/netty#16955

Auto-port 4.1: Fix GZIP FEXTRA extra-field handling in JdkZlibDecoder by @netty-project-bot in netty/netty#16957

Auto-port 4.1: Add opt-in validation of mandatory pseudo-header fields for HTTP/2 by @netty-project-bot in netty/netty#16964

Strictly validate MQTT UTF-8 Encoded String (#16939) by @chrisvest in netty/netty#16965

Auto-port 4.1: Stop DateFormatter trailing token from running past the parse end by @netty-project-bot in netty/netty#16968

Auto-port 4.1: IpFilter: Deprecate constructor which use accept by default by @netty-project-bot in netty/netty#16973

Add RFC 10008 QUERY Method support (#16966) by @normanmaurer in netty/netty#16978

Correctly release and fail queued traffic-shaping writes on close (#16959) by @normanmaurer in netty/netty#16976

Auto-port 4.1: FlowControlHandler: respect auto-read when toggled while dequeueing by @netty-project-bot in netty/netty#16983

IdleStateHandler: reset firstWriter/ReaderIdleEvent in resetWriteTimeout/resetReadTimeout (#16982) by @chrisvest in netty/netty#16989

Auto-port 4.1: Fix typo in AbstractSniHandler Javadoc by @netty-project-bot in netty/netty#16995

Auto-port 4.1: Reconcile AbstractCoalescingBufferQueue readableBytes when it drains, and fail stuck HTTP/2 streams instead of spinning empty DATA frames by @netty-project-bot in netty/netty#16997

Reject control characters at the boundary of the HTTP version token (#16971) by @normanmaurer in netty/netty#16986

Auto-port 4.1: Reset UTF-8 decode state on CR in StompSubframeDecoder by @netty-project-bot in netty/netty#17003

Auto-port 4.1: HTTP2: Pass the correct number of arguments when logging goaway by @netty-project-bot in netty/netty#17017

FastLz: Guard decompression against truncated input (#17000) by @chrisvest in netty/netty#17015

Backport 4.1 Fix propagation of startTls for client SslContext handler by @skyguard1 in netty/netty#17020

Auto-port 4.1: Reject non-token characters in HTTP/2 header names by @netty-project-bot in netty/netty#17022

Update lz4-java to 1.11.1 by @yawkat in netty/netty#17060

Pin github actions to reduce risk (#17043) by @normanmaurer in netty/netty#17044

Merge branches from forks (#17063) by @normanmaurer in netty/netty#17065

Full Changelog: netty/netty@netty-4.1.135.Final...netty-4.1.136.Final

netty-4.1.135.Final

Security fixes

CVE-2026-48059: memory exhaustion in io.netty:netty-codec-haproxy (high).

CVE-2026-47691: DNS cache poisoning in io.netty:netty-resolver-dns (high).

CVE-2026-50560: DDoS in io.netty:netty-codec-http2.

CVE-2026-50011: memory exhaustion in io.netty:netty-codec-redis (high).

CVE-2026-44250: memory exhaustion in io.netty:netty-codec-redis (high).

CVE-2026-44890: memory exhaustion in io.netty:netty-codec-redis (high).

CVE-2026-44249: IPv6 subnet filter bypass in io.netty:netty-handler (high).

CVE-2026-50020: request smuggling in io.netty:netty-codec-http.

CVE-2026-44893: memory leak in io.netty:netty-codec-haproxy (high).

CVE-2026-50010: TLS hostname verification accidentally disabled in io.netty:netty-handler (high).

CVE-2026-45673: DNS cache poisoning in io.netty:netty-resolver-dns.

CVE-2026-45416: excessive memory usage from SNIHandler in io.netty:netty-handler (high).

... (truncated)

Commits

fca0764 [maven-release-plugin] prepare release netty-4.1.136.Final
bb2ff68 Merge branches from forks (#17063) (#17065)
7b44dc9 Pin github actions to reduce risk (#17043) (#17044)
50e6e1d Update lz4-java to 1.11.1 (#17060)
d7dcf6c Auto-port 4.1: Reject non-token characters in HTTP/2 header names (#17022)
b12bd11 Backport 4.1 Fix propagation of startTls for client SslContext handler (#17020)
7fd5cc7 FastLz: Guard decompression against truncated input (#17000) (#17015)
42e7103 Auto-port 4.1: HTTP2: Pass the correct number of arguments when logging goawa...
666c3b2 Auto-port 4.1: Reset UTF-8 decode state on CR in StompSubframeDecoder (#17003)
df54c37 Reject control characters at the boundary of the HTTP version token (#16971) ...
Additional commits viewable in compare view

Updates io.netty:netty-codec-http from 4.1.132.Final to 4.1.136.Final

Release notes

Sourced from io.netty:netty-codec-http's releases.

netty-4.1.136.Final

What's Changed

SingleThreadEventExecutor: document Throwable safety contract on run() by @daguimu in netty/netty#16814

Make HTTP/2 frame hashCode consistent with equals by @daguimu in netty/netty#16692

Add BlockHound exception for DnsQueryIdSpace (#16896) by @chrisvest in netty/netty#16915

FlowControlHandler: Fix autoRead behavior by @chrisvest in netty/netty#16912

Auto-port 4.1: Fix incorrect bounds in error message of HpackDecoder.setMaxHeaderListSize by @netty-project-bot in netty/netty#16911

MQTT: Fix MQTT decoder size check after variable header replay by @daguimu in netty/netty#16916

MQTT: Make the decodeProperties early-REPLAY check actually fire by @daguimu in netty/netty#16813

Reject control characters at the boundary of HTTP method names (#16723) by @chrisvest in netty/netty#16933

Auto-port 4.1: Update to latest tcnative release by @netty-project-bot in netty/netty#16941

Auto-port 4.1: Fix HTTP 2 PUSH_PROMISE stream association validation by @netty-project-bot in netty/netty#16955

Auto-port 4.1: Fix GZIP FEXTRA extra-field handling in JdkZlibDecoder by @netty-project-bot in netty/netty#16957

Auto-port 4.1: Add opt-in validation of mandatory pseudo-header fields for HTTP/2 by @netty-project-bot in netty/netty#16964

Strictly validate MQTT UTF-8 Encoded String (#16939) by @chrisvest in netty/netty#16965

Auto-port 4.1: Stop DateFormatter trailing token from running past the parse end by @netty-project-bot in netty/netty#16968

Auto-port 4.1: IpFilter: Deprecate constructor which use accept by default by @netty-project-bot in netty/netty#16973

Add RFC 10008 QUERY Method support (#16966) by @normanmaurer in netty/netty#16978

Correctly release and fail queued traffic-shaping writes on close (#16959) by @normanmaurer in netty/netty#16976

Auto-port 4.1: FlowControlHandler: respect auto-read when toggled while dequeueing by @netty-project-bot in netty/netty#16983

IdleStateHandler: reset firstWriter/ReaderIdleEvent in resetWriteTimeout/resetReadTimeout (#16982) by @chrisvest in netty/netty#16989

Auto-port 4.1: Fix typo in AbstractSniHandler Javadoc by @netty-project-bot in netty/netty#16995

Auto-port 4.1: Reconcile AbstractCoalescingBufferQueue readableBytes when it drains, and fail stuck HTTP/2 streams instead of spinning empty DATA frames by @netty-project-bot in netty/netty#16997

Reject control characters at the boundary of the HTTP version token (#16971) by @normanmaurer in netty/netty#16986

Auto-port 4.1: Reset UTF-8 decode state on CR in StompSubframeDecoder by @netty-project-bot in netty/netty#17003

Auto-port 4.1: HTTP2: Pass the correct number of arguments when logging goaway by @netty-project-bot in netty/netty#17017

FastLz: Guard decompression against truncated input (#17000) by @chrisvest in netty/netty#17015

Backport 4.1 Fix propagation of startTls for client SslContext handler by @skyguard1 in netty/netty#17020

Auto-port 4.1: Reject non-token characters in HTTP/2 header names by @netty-project-bot in netty/netty#17022

Update lz4-java to 1.11.1 by @yawkat in netty/netty#17060

Pin github actions to reduce risk (#17043) by @normanmaurer in netty/netty#17044

Merge branches from forks (#17063) by @normanmaurer in netty/netty#17065

Full Changelog: netty/netty@netty-4.1.135.Final...netty-4.1.136.Final

netty-4.1.135.Final

Security fixes

CVE-2026-48059: memory exhaustion in io.netty:netty-codec-haproxy (high).

CVE-2026-47691: DNS cache poisoning in io.netty:netty-resolver-dns (high).

CVE-2026-50560: DDoS in io.netty:netty-codec-http2.

CVE-2026-50011: memory exhaustion in io.netty:netty-codec-redis (high).

CVE-2026-44250: memory exhaustion in io.netty:netty-codec-redis (high).

CVE-2026-44890: memory exhaustion in io.netty:netty-codec-redis (high).

CVE-2026-44249: IPv6 subnet filter bypass in io.netty:netty-handler (high).

CVE-2026-50020: request smuggling in io.netty:netty-codec-http.

CVE-2026-44893: memory leak in io.netty:netty-codec-haproxy (high).

CVE-2026-50010: TLS hostname verification accidentally disabled in io.netty:netty-handler (high).

CVE-2026-45673: DNS cache poisoning in io.netty:netty-resolver-dns.

CVE-2026-45416: excessive memory usage from SNIHandler in io.netty:netty-handler (high).

... (truncated)

Commits

fca0764 [maven-release-plugin] prepare release netty-4.1.136.Final
bb2ff68 Merge branches from forks (#17063) (#17065)
7b44dc9 Pin github actions to reduce risk (#17043) (#17044)
50e6e1d Update lz4-java to 1.11.1 (#17060)
d7dcf6c Auto-port 4.1: Reject non-token characters in HTTP/2 header names (#17022)
b12bd11 Backport 4.1 Fix propagation of startTls for client SslContext handler (#17020)
7fd5cc7 FastLz: Guard decompression against truncated input (#17000) (#17015)
42e7103 Auto-port 4.1: HTTP2: Pass the correct number of arguments when logging goawa...
666c3b2 Auto-port 4.1: Reset UTF-8 decode state on CR in StompSubframeDecoder (#17003)
df54c37 Reject control characters at the boundary of the HTTP version token (#16971) ...
Additional commits viewable in compare view

Updates io.netty:netty-codec-http2 from 4.1.132.Final to 4.1.136.Final

Release notes

Sourced from io.netty:netty-codec-http2's releases.

netty-4.1.136.Final

What's Changed

SingleThreadEventExecutor: document Throwable safety contract on run() by @daguimu in netty/netty#16814

Make HTTP/2 frame hashCode consistent with equals by @daguimu in netty/netty#16692

Add BlockHound exception for DnsQueryIdSpace (#16896) by @chrisvest in netty/netty#16915

FlowControlHandler: Fix autoRead behavior by @chrisvest in netty/netty#16912

Auto-port 4.1: Fix incorrect bounds in error message of HpackDecoder.setMaxHeaderListSize by @netty-project-bot in netty/netty#16911

MQTT: Fix MQTT decoder size check after variable header replay by @daguimu in netty/netty#16916

MQTT: Make the decodeProperties early-REPLAY check actually fire by @daguimu in netty/netty#16813

Reject control characters at the boundary of HTTP method names (#16723) by @chrisvest in netty/netty#16933

Auto-port 4.1: Update to latest tcnative release by @netty-project-bot in netty/netty#16941

Auto-port 4.1: Fix HTTP 2 PUSH_PROMISE stream association validation by @netty-project-bot in netty/netty#16955

Auto-port 4.1: Fix GZIP FEXTRA extra-field handling in JdkZlibDecoder by @netty-project-bot in netty/netty#16957

Auto-port 4.1: Add opt-in validation of mandatory pseudo-header fields for HTTP/2 by @netty-project-bot in netty/netty#16964

Strictly validate MQTT UTF-8 Encoded String (#16939) by @chrisvest in netty/netty#16965

Auto-port 4.1: Stop DateFormatter trailing token from running past the parse end by @netty-project-bot in netty/netty#16968

Auto-port 4.1: IpFilter: Deprecate constructor which use accept by default by @netty-project-bot in netty/netty#16973

Add RFC 10008 QUERY Method support (#16966) by @normanmaurer in netty/netty#16978

Correctly release and fail queued traffic-shaping writes on close (#16959) by @normanmaurer in netty/netty#16976

Auto-port 4.1: FlowControlHandler: respect auto-read when toggled while dequeueing by @netty-project-bot in netty/netty#16983

IdleStateHandler: reset firstWriter/ReaderIdleEvent in resetWriteTimeout/resetReadTimeout (#16982) by @chrisvest in netty/netty#16989

Auto-port 4.1: Fix typo in AbstractSniHandler Javadoc by @netty-project-bot in netty/netty#16995

Auto-port 4.1: Reconcile AbstractCoalescingBufferQueue readableBytes when it drains, and fail stuck HTTP/2 streams instead of spinning empty DATA frames by @netty-project-bot in netty/netty#16997

Reject control characters at the boundary of the HTTP version token (#16971) by @normanmaurer in netty/netty#16986

Auto-port 4.1: Reset UTF-8 decode state on CR in StompSubframeDecoder by @netty-project-bot in netty/netty#17003

Auto-port 4.1: HTTP2: Pass the correct number of arguments when logging goaway by @netty-project-bot in netty/netty#17017

FastLz: Guard decompression against truncated input (#17000) by @chrisvest in netty/netty#17015

Backport 4.1 Fix propagation of startTls for client SslContext handler by @skyguard1 in netty/netty#17020

Auto-port 4.1: Reject non-token characters in HTTP/2 header names by @netty-project-bot in netty/netty#17022

Update lz4-java to 1.11.1 by @yawkat in netty/netty#17060

Pin github actions to reduce risk (#17043) by @normanmaurer in netty/netty#17044

Merge branches from forks (#17063) by @normanmaurer in netty/netty#17065

Full Changelog: netty/netty@netty-4.1.135.Final...netty-4.1.136.Final

netty-4.1.135.Final

Security fixes

CVE-2026-48059: memory exhaustion in io.netty:netty-codec-haproxy (high).

CVE-2026-47691: DNS cache poisoning in io.netty:netty-resolver-dns (high).

CVE-2026-50560: DDoS in io.netty:netty-codec-http2.

CVE-2026-50011: memory exhaustion in io.netty:netty-codec-redis (high).

CVE-2026-44250: memory exhaustion in io.netty:netty-codec-redis (high).

CVE-2026-44890: memory exhaustion in io.netty:netty-codec-redis (high).

CVE-2026-44249: IPv6 subnet filter bypass in io.netty:netty-handler (high).

CVE-2026-50020: request smuggling in io.netty:netty-codec-http.

CVE-2026-44893: memory leak in io.netty:netty-codec-haproxy (high).

CVE-2026-50010: TLS hostname verification accidentally disabled in io.netty:netty-handler (high).

CVE-2026-45673: DNS cache poisoning in io.netty:netty-resolver-dns.

CVE-2026-45416: excessive memory usage from SNIHandler in io.netty:netty-handler (high).

... (truncated)

Commits

fca0764 [maven-release-plugin] prepare release netty-4.1.136.Final
bb2ff68 Merge branches from forks (#17063) (#17065)
7b44dc9 Pin github actions to reduce risk (#17043) (#17044)
50e6e1d Update lz4-java to 1.11.1 (#17060)
d7dcf6c Auto-port 4.1: Reject non-token characters in HTTP/2 header names (#17022)
b12bd11 Backport 4.1 Fix propagation of startTls for client SslContext handler (#17020)
7fd5cc7 FastLz: Guard decompression against truncated input (#17000) (#17015)
42e7103 Auto-port 4.1: HTTP2: Pass the correct number of arguments when logging goawa...
666c3b2 Auto-port 4.1: Reset UTF-8 decode state on CR in StompSubframeDecoder (#17003)
df54c37 Reject control characters at the boundary of the HTTP version token (#16971) ...
Additional commits viewable in compare view

Updates com.fasterxml.jackson.core:jackson-databind from 2.18.6 to 2.18.9

Commits

See full diff in compare view

Updates com.fasterxml.jackson.core:jackson-databind from 2.18.6 to 2.18.9

Commits

See full diff in compare view

Updates com.fasterxml.jackson.core:jackson-core from 2.18.6 to 2.18.9

Commits

66c7667 [maven-release-plugin] prepare release jackson-core-2.18.9
0c59c3c Prep for 2.18.9 release
ada244d Post-release dep version bump
52f69d3 [maven-release-plugin] prepare for next development iteration
899d70a [maven-release-plugin] prepare release jackson-core-2.18.8
a006b52 Prep for 2.18.8 release
88e3941 Add back JDK 11 in CI
1665ef1 Fix release notes
4cdd529 Apply number-length validator on streaming integer path of async parser (#1611)
cd4d6b2 Post-release dep version bump
Additional commits viewable in compare view

Updates com.fasterxml.jackson.core:jackson-databind from 2.18.6 to 2.18.9

Commits

See full diff in compare view

Updates com.fasterxml.jackson.core:jackson-databind from 2.18.6 to 2.18.9

Commits

See full diff in compare view

Updates com.fasterxml.jackson.core:jackson-databind from 2.18.6 to 2.18.9

Commits

See full diff in compare view

Updates io.netty:netty-codec from 4.1.132.Final to 4.1.136.Final

Release notes

Sourced from io.netty:netty-codec's releases.

netty-4.1.136.Final

What's Changed

SingleThreadEventExecutor: document Throwable safety contract on run() by @daguimu in netty/netty#16814

Make HTTP/2 frame hashCode consistent with equals by @daguimu in netty/netty#16692

Add BlockHound exception for DnsQueryIdSpace (#16896) by @chrisvest in netty/netty#16915

FlowControlHandler: Fix autoRead behavior by @chrisvest in netty/netty#16912

Auto-port 4.1: Fix incorrect bounds in error message of HpackDecoder.setMaxHeaderListSize by @netty-project-bot in netty/netty#16911

MQTT: Fix MQTT decoder size check after variable header replay by @daguimu in netty/netty#16916

MQTT: Make the decodeProperties early-REPLAY check actually fire by @daguimu in netty/netty#16813

Reject control characters at the boundary of HTTP method names (#16723) by @chrisvest in netty/netty#16933

Auto-port 4.1: Update to latest tcnative release by @netty-project-bot in netty/netty#16941

Auto-port 4.1: Fix HTTP 2 PUSH_PROMISE stream association validation by @netty-project-bot in netty/netty#16955

Auto-port 4.1: Fix GZIP FEXTRA extra-field handling in JdkZlibDecoder by @netty-project-bot in netty/netty#16957

Auto-port 4.1: Add opt-in validation of mandatory pseudo-header fields for HTTP/2 by @netty-project-bot in netty/netty#16964

Strictly validate MQTT UTF-8 Encoded String (#16939) by @chrisvest in netty/netty#16965

Auto-port 4.1: Stop DateFormatter trailing token from running past the parse end by @netty-project-bot in netty/netty#16968

Auto-port 4.1: IpFilter: Deprecate constructor which use accept by default by @netty-project-bot in netty/netty#16973

Add RFC 10008 QUERY Method support (#16966) by @normanmaurer in netty/netty#16978

Correctly release and fail queued traffic-shaping writes on close (#16959) by @normanmaurer in netty/netty#16976

Auto-port 4.1: FlowControlHandler: respect auto-read when toggled while dequeueing by @netty-project-bot in netty/netty#16983

IdleStateHandler: reset firstWriter/ReaderIdleEvent in resetWriteTimeout/resetReadTimeout (#16982) by @chrisvest in netty/netty#16989

Auto-port 4.1: Fix typo in AbstractSniHandler Javadoc by @netty-project-bot in netty/netty#16995

Auto-port 4.1: Reconcile AbstractCoalescingBufferQueue readableBytes when it drains, and fail stuck HTTP/2 streams instead of spinning empty DATA frames by @netty-project-bot in netty/netty#16997

Reject control characters at the boundary of the HTTP version token (#16971) by @normanmaurer in netty/netty#16986

Auto-port 4.1: Reset UTF-8 decode state on CR in StompSubframeDecoder by @netty-project-bot in netty/netty#17003

Auto-port 4.1: HTTP2: Pass the correct number of arguments when logging goaway by @netty-project-bot in netty/netty#17017

FastLz: Guard decompression against truncated input (#17000) by @chrisvest in netty/netty#17015

Backport 4.1 Fix propagation of startTls for client SslContext handler by @skyguard1 in netty/netty#17020

Auto-port 4.1: Reject non-token characters in HTTP/2 header names by @netty-project-bot in netty/netty#17022

Update lz4-java to 1.11.1 by @yawkat in netty/netty#17060

Pin github actions to reduce risk (#17043) by @normanmaurer in netty/netty#17044

Merge branches from forks (#17063) by @normanmaurer in netty/netty#17065

Full Changelog: netty/netty@netty-4.1.135.Final...netty-4.1.136.Final

netty-4.1.135.Final

Security fixes

CVE-2026-48059: memory exhaustion in io.netty:netty-codec-haproxy (high).

CVE-2026-47691: DNS cache poisoning in io.netty:netty-resolver-dns (high).

CVE-2026-50560: DDoS in io.netty:netty-codec-http2.

CVE-2026-50011: memory exhaustion in io.netty:netty-codec-redis (high).

CVE-2026-44250: memory exhaustion in io.netty:netty-codec-redis (high).

Bumps the maven group with 1 update in the /sdk/batch/microsoft-azure-batch directory: [com.fasterxml.jackson.core:jackson-core](https://github.com/FasterXML/jackson-core). Bumps the maven group with 1 update in the /sdk/clientcore/annotation-processor-test directory: [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson). Bumps the maven group with 1 update in the /sdk/clientcore/core directory: [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson). Bumps the maven group with 4 updates in the /sdk/clientcore/http-netty4 directory: [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson), [io.netty:netty-codec](https://github.com/netty/netty), [io.netty:netty-codec-http](https://github.com/netty/netty) and [io.netty:netty-codec-http2](https://github.com/netty/netty). Bumps the maven group with 1 update in the /sdk/clientcore/http-okhttp3 directory: [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson). Bumps the maven group with 1 update in the /sdk/core-v2/azure-core-test directory: [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson). Bumps the maven group with 2 updates in the /sdk/core/azure-core directory: [com.fasterxml.jackson.core:jackson-core](https://github.com/FasterXML/jackson-core) and [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson). Bumps the maven group with 1 update in the /sdk/core/azure-core-http-jdk-httpclient directory: [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson). Bumps the maven group with 4 updates in the /sdk/core/azure-core-http-netty directory: [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson), [io.netty:netty-codec](https://github.com/netty/netty), [io.netty:netty-codec-http](https://github.com/netty/netty) and [io.netty:netty-codec-http2](https://github.com/netty/netty). Bumps the maven group with 1 update in the /sdk/core/azure-core-http-okhttp directory: [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson). Bumps the maven group with 1 update in the /sdk/core/azure-core-http-vertx directory: [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson). Bumps the maven group with 2 updates in the /sdk/core/azure-core-serializer-json-jackson directory: [com.fasterxml.jackson.core:jackson-core](https://github.com/FasterXML/jackson-core) and [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson). Bumps the maven group with 2 updates in the /sdk/core/azure-core-version-tests directory: [com.fasterxml.jackson.core:jackson-core](https://github.com/FasterXML/jackson-core) and [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson). Bumps the maven group with 2 updates in the /sdk/cosmos/azure-cosmos directory: [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson) and [io.micrometer:micrometer-core](https://github.com/micrometer-metrics/micrometer). Bumps the maven group with 2 updates in the /sdk/cosmos/azure-cosmos-benchmark directory: [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson) and [io.micrometer:micrometer-core](https://github.com/micrometer-metrics/micrometer). Bumps the maven group with 1 update in the /sdk/cosmos/azure-cosmos-spark-account-data-resolver-sample directory: [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson). Bumps the maven group with 2 updates in the /sdk/cosmos/azure-cosmos-spark_3 directory: [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson) and [io.micrometer:micrometer-core](https://github.com/micrometer-metrics/micrometer). Bumps the maven group with 2 updates in the /sdk/cosmos/azure-cosmos-spark_3-3_2-12 directory: [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson) and [io.micrometer:micrometer-core](https://github.com/micrometer-metrics/micrometer). Bumps the maven group with 2 updates in the /sdk/cosmos/azure-cosmos-spark_3-4_2-12 directory: [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson) and [io.micrometer:micrometer-core](https://github.com/micrometer-metrics/micrometer). Bumps the maven group with 2 updates in the /sdk/cosmos/azure-cosmos-spark_3-5 directory: [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson) and [io.micrometer:micrometer-core](https://github.com/micrometer-metrics/micrometer). Bumps the maven group with 2 updates in the /sdk/cosmos/azure-cosmos-spark_4 directory: [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson) and [io.micrometer:micrometer-core](https://github.com/micrometer-metrics/micrometer). Bumps the maven group with 1 update in the /sdk/cosmos/fabric-cosmos-spark-auth_3 directory: [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson). Bumps the maven group with 1 update in the /sdk/keyvault/azure-security-test-keyvault-jca directory: [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson). Bumps the maven group with 2 updates in the /sdk/modelsrepository/azure-iot-modelsrepository directory: [com.fasterxml.jackson.core:jackson-core](https://github.com/FasterXML/jackson-core) and [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson). Bumps the maven group with 2 updates in the /sdk/openai/azure-ai-openai-realtime directory: [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson) and [io.netty:netty-codec-http](https://github.com/netty/netty). Bumps the maven group with 1 update in the /sdk/parents/azure-client-sdk-parent directory: [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson). Bumps the maven group with 1 update in the /sdk/parents/azure-client-sdk-parent-v2 directory: [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson). Bumps the maven group with 1 update in the /sdk/parents/clientcore-parent directory: [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson). Bumps the maven group with 2 updates in the /sdk/serialization/azure-json directory: [com.fasterxml.jackson.core:jackson-core](https://github.com/FasterXML/jackson-core) and [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson). Bumps the maven group with 4 updates in the /sdk/spring/azure-spring-data-cosmos directory: [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson), [org.springframework:spring-core](https://github.com/spring-projects/spring-framework), [org.springframework.data:spring-data-commons](https://github.com/spring-projects/spring-data-commons) and [org.springframework:spring-expression](https://github.com/spring-projects/spring-framework). Bumps the maven group with 2 updates in the /sdk/spring/spring-cloud-azure-feature-management directory: [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson) and [io.projectreactor.netty:reactor-netty](https://github.com/reactor/reactor-netty). Bumps the maven group with 2 updates in the /sdk/spring/spring-cloud-azure-feature-management-web directory: [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson) and [org.springframework:spring-webmvc](https://github.com/spring-projects/spring-framework). Bumps the maven group with 4 updates in the /sdk/spring/spring-messaging-azure directory: [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson), [io.micrometer:micrometer-core](https://github.com/micrometer-metrics/micrometer), [org.springframework.data:spring-data-commons](https://github.com/spring-projects/spring-data-commons) and [org.springframework.retry:spring-retry](https://github.com/spring-projects/spring-retry). Bumps the maven group with 4 updates in the /sdk/spring/spring-messaging-azure-eventhubs directory: [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson), [io.micrometer:micrometer-core](https://github.com/micrometer-metrics/micrometer), [org.springframework.data:spring-data-commons](https://github.com/spring-projects/spring-data-commons) and [org.springframework.retry:spring-retry](https://github.com/spring-projects/spring-retry). Bumps the maven group with 4 updates in the /sdk/spring/spring-messaging-azure-servicebus directory: [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson), [io.micrometer:micrometer-core](https://github.com/micrometer-metrics/micrometer), [org.springframework.data:spring-data-commons](https://github.com/spring-projects/spring-data-commons) and [org.springframework.retry:spring-retry](https://github.com/spring-projects/spring-retry). Bumps the maven group with 2 updates in the /sdk/webpubsub/azure-messaging-webpubsub-client directory: [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson) and [io.netty:netty-codec-http](https://github.com/netty/netty). Updates `com.fasterxml.jackson.core:jackson-core` from 2.18.6 to 2.18.9 - [Commits](FasterXML/jackson-core@jackson-core-2.18.6...jackson-core-2.18.9) Updates `com.fasterxml.jackson.core:jackson-databind` from 2.18.6 to 2.18.9 - [Commits](https://github.com/FasterXML/jackson/commits) Updates `com.fasterxml.jackson.core:jackson-databind` from 2.18.6 to 2.18.9 - [Commits](https://github.com/FasterXML/jackson/commits) Updates `com.fasterxml.jackson.core:jackson-databind` from 2.18.6 to 2.18.9 - [Commits](https://github.com/FasterXML/jackson/commits) Updates `io.netty:netty-codec` from 4.1.132.Final to 4.1.136.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.1.132.Final...netty-4.1.136.Final) Updates `io.netty:netty-codec-http` from 4.1.132.Final to 4.1.136.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.1.132.Final...netty-4.1.136.Final) Updates `io.netty:netty-codec-http2` from 4.1.132.Final to 4.1.136.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.1.132.Final...netty-4.1.136.Final) Updates `com.fasterxml.jackson.core:jackson-databind` from 2.18.6 to 2.18.9 - [Commits](https://github.com/FasterXML/jackson/commits) Updates `com.fasterxml.jackson.core:jackson-databind` from 2.18.6 to 2.18.9 - [Commits](https://github.com/FasterXML/jackson/commits) Updates `com.fasterxml.jackson.core:jackson-core` from 2.18.6 to 2.18.9 - [Commits](FasterXML/jackson-core@jackson-core-2.18.6...jackson-core-2.18.9) Updates `com.fasterxml.jackson.core:jackson-databind` from 2.18.6 to 2.18.9 - [Commits](https://github.com/FasterXML/jackson/commits) Updates `com.fasterxml.jackson.core:jackson-databind` from 2.18.6 to 2.18.9 - [Commits](https://github.com/FasterXML/jackson/commits) Updates `com.fasterxml.jackson.core:jackson-databind` from 2.18.6 to 2.18.9 - [Commits](https://github.com/FasterXML/jackson/commits) Updates `io.netty:netty-codec` from 4.1.132.Final to 4.1.136.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.1.132.Final...netty-4.1.136.Final) Updates `io.netty:netty-codec-http` from 4.1.132.Final to 4.1.136.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.1.132.Final...netty-4.1.136.Final) Updates `io.netty:netty-codec-http2` from 4.1.132.Final to 4.1.136.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.1.132.Final...netty-4.1.136.Final) Updates `com.fasterxml.jackson.core:jackson-databind` from 2.18.6 to 2.18.9 - [Commits](https://github.com/FasterXML/jackson/commits) Updates `com.fasterxml.jackson.core:jackson-databind` from 2.18.6 to 2.18.9 - [Commits](https://github.com/FasterXML/jackson/commits) Updates `com.fasterxml.jackson.core:jackson-core` from 2.18.6 to 2.18.9 - [Commits](FasterXML/jackson-core@jackson-core-2.18.6...jackson-core-2.18.9) Updates `com.fasterxml.jackson.core:jackson-databind` from 2.18.6 to 2.18.9 - [Commits](https://github.com/FasterXML/jackson/commits) Updates `com.fasterxml.jackson.core:jackson-core` from 2.18.6 to 2.18.9 - [Commits](FasterXML/jackson-core@jackson-core-2.18.6...jackson-core-2.18.9) Updates `com.fasterxml.jackson.core:jackson-databind` from 2.18.6 to 2.18.9 - [Commits](https://github.com/FasterXML/jackson/commits) Updates `com.fasterxml.jackson.core:jackson-databind` from 2.18.6 to 2.18.9 - [Commits](https://github.com/FasterXML/jackson/commits) Updates `io.micrometer:micrometer-core` from 1.15.1 to 1.16.6 - [Release notes](https://github.com/micrometer-metrics/micrometer/releases) - [Commits](micrometer-metrics/micrometer@v1.15.1...v1.16.6) Updates `com.fasterxml.jackson.core:jackson-databind` from 2.18.6 to 2.18.9 - [Commits](https://github.com/FasterXML/jackson/commits) Updates `io.micrometer:micrometer-core` from 1.15.1 to 1.16.6 - [Release notes](https://github.com/micrometer-metrics/micrometer/releases) - [Commits](micrometer-metrics/micrometer@v1.15.1...v1.16.6) Updates `com.fasterxml.jackson.core:jackson-databind` from 2.18.6 to 2.18.9 - [Commits](https://github.com/FasterXML/jackson/commits) Updates `com.fasterxml.jackson.core:jackson-databind` from 2.18.6 to 2.18.9 - [Commits](https://github.com/FasterXML/jackson/commits) Updates `io.micrometer:micrometer-core` from 1.15.1 to 1.16.6 - [Release notes](https://github.com/micrometer-metrics/micrometer/releases) - [Commits](micrometer-metrics/micrometer@v1.15.1...v1.16.6) Updates `com.fasterxml.jackson.core:jackson-databind` from 2.18.6 to 2.18.9 - [Commits](https://github.com/FasterXML/jackson/commits) Updates `io.micrometer:micrometer-core` from 1.15.1 to 1.16.6 - [Release notes](https://github.com/micrometer-metrics/micrometer/releases) - [Commits](micrometer-metrics/micrometer@v1.15.1...v1.16.6) Updates `com.fasterxml.jackson.core:jackson-databind` from 2.18.6 to 2.18.9 - [Commits](https://github.com/FasterXML/jackson/commits) Updates `io.micrometer:micrometer-core` from 1.15.1 to 1.16.6 - [Release notes](https://github.com/micrometer-metrics/micrometer/releases) - [Commits](micrometer-metrics/micrometer@v1.15.1...v1.16.6) Updates `com.fasterxml.jackson.core:jackson-databind` from 2.18.6 to 2.18.9 - [Commits](https://github.com/FasterXML/jackson/commits) Updates `io.micrometer:micrometer-core` from 1.15.1 to 1.16.6 - [Release notes](https://github.com/micrometer-metrics/micrometer/releases) - [Commits](micrometer-metrics/micrometer@v1.15.1...v1.16.6) Updates `com.fasterxml.jackson.core:jackson-databind` from 2.18.6 to 2.18.9 - [Commits](https://github.com/FasterXML/jackson/commits) Updates `io.micrometer:micrometer-core` from 1.15.1 to 1.16.6 - [Release notes](https://github.com/micrometer-metrics/micrometer/releases) - [Commits](micrometer-metrics/micrometer@v1.15.1...v1.16.6) Updates `com.fasterxml.jackson.core:jackson-databind` from 2.18.6 to 2.18.9 - [Commits](https://github.com/FasterXML/jackson/commits) Updates `com.fasterxml.jackson.core:jackson-databind` from 2.18.6 to 2.18.9 - [Commits](https://github.com/FasterXML/jackson/commits) Updates `com.fasterxml.jackson.core:jackson-core` from 2.18.6 to 2.18.9 - [Commits](FasterXML/jackson-core@jackson-core-2.18.6...jackson-core-2.18.9) Updates `com.fasterxml.jackson.core:jackson-databind` from 2.18.6 to 2.18.9 - [Commits](https://github.com/FasterXML/jackson/commits) Updates `com.fasterxml.jackson.core:jackson-databind` from 2.18.6 to 2.18.9 - [Commits](https://github.com/FasterXML/jackson/commits) Updates `io.netty:netty-codec-http` from 4.1.132.Final to 4.1.136.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.1.132.Final...netty-4.1.136.Final) Updates `com.fasterxml.jackson.core:jackson-databind` from 2.18.6 to 2.18.9 - [Commits](https://github.com/FasterXML/jackson/commits) Updates `com.fasterxml.jackson.core:jackson-databind` from 2.18.6 to 2.18.9 - [Commits](https://github.com/FasterXML/jackson/commits) Updates `com.fasterxml.jackson.core:jackson-databind` from 2.18.6 to 2.18.9 - [Commits](https://github.com/FasterXML/jackson/commits) Updates `com.fasterxml.jackson.core:jackson-core` from 2.18.6 to 2.18.9 - [Commits](FasterXML/jackson-core@jackson-core-2.18.6...jackson-core-2.18.9) Updates `com.fasterxml.jackson.core:jackson-databind` from 2.18.6 to 2.18.9 - [Commits](https://github.com/FasterXML/jackson/commits) Updates `com.fasterxml.jackson.core:jackson-databind` from 2.18.6 to 2.18.9 - [Commits](https://github.com/FasterXML/jackson/commits) Updates `org.springframework:spring-core` from 7.0.6 to 7.0.8 - [Release notes](https://github.com/spring-projects/spring-framework/releases) - [Commits](spring-projects/spring-framework@v7.0.6...v7.0.8) Updates `org.springframework.data:spring-data-commons` from 4.0.4 to 4.0.6 - [Release notes](https://github.com/spring-projects/spring-data-commons/releases) - [Commits](spring-projects/spring-data-commons@4.0.4...4.0.6) Updates `org.springframework:spring-expression` from 7.0.6 to 7.0.8 - [Release notes](https://github.com/spring-projects/spring-framework/releases) - [Commits](spring-projects/spring-framework@v7.0.6...v7.0.8) Updates `com.fasterxml.jackson.core:jackson-databind` from 2.18.6 to 2.18.9 - [Commits](https://github.com/FasterXML/jackson/commits) Updates `io.projectreactor.netty:reactor-netty` from 1.3.4 to 1.3.6 - [Release notes](https://github.com/reactor/reactor-netty/releases) - [Commits](reactor/reactor-netty@v1.3.4...v1.3.6) Updates `com.fasterxml.jackson.core:jackson-databind` from 2.18.6 to 2.18.9 - [Commits](https://github.com/FasterXML/jackson/commits) Updates `org.springframework:spring-webmvc` from 7.0.6 to 7.0.8 - [Release notes](https://github.com/spring-projects/spring-framework/releases) - [Commits](spring-projects/spring-framework@v7.0.6...v7.0.8) Updates `com.fasterxml.jackson.core:jackson-databind` from 2.18.6 to 2.18.9 - [Commits](https://github.com/FasterXML/jackson/commits) Updates `io.micrometer:micrometer-core` from 1.16.4 to 1.16.6 - [Release notes](https://github.com/micrometer-metrics/micrometer/releases) - [Commits](micrometer-metrics/micrometer@v1.15.1...v1.16.6) Updates `org.springframework.data:spring-data-commons` from 4.0.4 to 4.0.6 - [Release notes](https://github.com/spring-projects/spring-data-commons/releases) - [Commits](spring-projects/spring-data-commons@4.0.4...4.0.6) Updates `org.springframework.retry:spring-retry` from 2.0.12 to 2.0.13 - [Release notes](https://github.com/spring-projects/spring-retry/releases) - [Commits](spring-attic/spring-retry@v2.0.12...v2.0.13) Updates `com.fasterxml.jackson.core:jackson-databind` from 2.18.6 to 2.18.9 - [Commits](https://github.com/FasterXML/jackson/commits) Updates `io.micrometer:micrometer-core` from 1.16.4 to 1.16.6 - [Release notes](https://github.com/micrometer-metrics/micrometer/releases) - [Commits](micrometer-metrics/micrometer@v1.15.1...v1.16.6) Updates `org.springframework.data:spring-data-commons` from 4.0.4 to 4.0.6 - [Release notes](https://github.com/spring-projects/spring-data-commons/releases) - [Commits](spring-projects/spring-data-commons@4.0.4...4.0.6) Updates `org.springframework.retry:spring-retry` from 2.0.12 to 2.0.13 - [Release notes](https://github.com/spring-projects/spring-retry/releases) - [Commits](spring-attic/spring-retry@v2.0.12...v2.0.13) Updates `com.fasterxml.jackson.core:jackson-databind` from 2.18.6 to 2.18.9 - [Commits](https://github.com/FasterXML/jackson/commits) Updates `io.micrometer:micrometer-core` from 1.16.4 to 1.16.6 - [Release notes](https://github.com/micrometer-metrics/micrometer/releases) - [Commits](micrometer-metrics/micrometer@v1.15.1...v1.16.6) Updates `org.springframework.data:spring-data-commons` from 4.0.4 to 4.0.6 - [Release notes](https://github.com/spring-projects/spring-data-commons/releases) - [Commits](spring-projects/spring-data-commons@4.0.4...4.0.6) Updates `org.springframework.retry:spring-retry` from 2.0.12 to 2.0.13 - [Release notes](https://github.com/spring-projects/spring-retry/releases) - [Commits](spring-attic/spring-retry@v2.0.12...v2.0.13) Updates `com.fasterxml.jackson.core:jackson-databind` from 2.18.6 to 2.18.9 - [Commits](https://github.com/FasterXML/jackson/commits) Updates `io.netty:netty-codec-http` from 4.1.132.Final to 4.1.136.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.1.132.Final...netty-4.1.136.Final) --- updated-dependencies: - dependency-name: com.fasterxml.jackson.core:jackson-core dependency-version: 2.18.9 dependency-type: direct:development dependency-group: maven - dependency-name: com.fasterxml.jackson.core:jackson-databind dependency-version: 2.18.9 dependency-type: direct:production dependency-group: maven - dependency-name: com.fasterxml.jackson.core:jackson-databind dependency-version: 2.18.9 dependency-type: direct:production dependency-group: maven - dependency-name: com.fasterxml.jackson.core:jackson-databind dependency-version: 2.18.9 dependency-type: direct:production dependency-group: maven - dependency-name: io.netty:netty-codec dependency-version: 4.1.136.Final dependency-type: direct:production dependency-group: maven - dependency-name: io.netty:netty-codec-http dependency-version: 4.1.136.Final dependency-type: direct:production dependency-group: maven - dependency-name: io.netty:netty-codec-http2 dependency-version: 4.1.136.Final dependency-type: direct:production dependency-group: maven - dependency-name: com.fasterxml.jackson.core:jackson-databind dependency-version: 2.18.9 dependency-type: direct:production dependency-group: maven - dependency-name: com.fasterxml.jackson.core:jackson-databind dependency-version: 2.18.9 dependency-type: direct:production dependency-group: maven - dependency-name: com.fasterxml.jackson.core:jackson-core dependency-version: 2.18.9 dependency-type: direct:production dependency-group: maven - dependency-name: com.fasterxml.jackson.core:jackson-databind dependency-version: 2.18.9 dependency-type: direct:production dependency-group: maven - dependency-name: com.fasterxml.jackson.core:jackson-databind dependency-version: 2.18.9 dependency-type: direct:production dependency-group: maven - dependency-name: com.fasterxml.jackson.core:jackson-databind dependency-version: 2.18.9 dependency-type: direct:production dependency-group: maven - dependency-name: io.netty:netty-codec dependency-version: 4.1.136.Final dependency-type: direct:production dependency-group: maven - dependency-name: io.netty:netty-codec-http dependency-version: 4.1.136.Final dependency-type: direct:production dependency-group: maven - dependency-name: io.netty:netty-codec-http2 dependency-version: 4.1.136.Final dependency-type: direct:production dependency-group: maven - dependency-name: com.fasterxml.jackson.core:jackson-databind dependency-version: 2.18.9 dependency-type: direct:production dependency-group: maven - dependency-name: com.fasterxml.jackson.core:jackson-databind dependency-version: 2.18.9 dependency-type: direct:production dependency-group: maven - dependency-name: com.fasterxml.jackson.core:jackson-core dependency-version: 2.18.9 dependency-type: direct:production dependency-group: maven - dependency-name: com.fasterxml.jackson.core:jackson-databind dependency-version: 2.18.9 dependency-type: direct:production dependency-group: maven - dependency-name: com.fasterxml.jackson.core:jackson-core dependency-version: 2.18.9 dependency-type: direct:production dependency-group: maven - dependency-name: com.fasterxml.jackson.core:jackson-databind dependency-version: 2.18.9 dependency-type: direct:production dependency-group: maven - dependency-name: com.fasterxml.jackson.core:jackson-databind dependency-version: 2.18.9 dependency-type: direct:production dependency-group: maven - dependency-name: io.micrometer:micrometer-core dependency-version: 1.16.6 dependency-type: direct:production dependency-group: maven - dependency-name: com.fasterxml.jackson.core:jackson-databind dependency-version: 2.18.9 dependency-type: direct:production dependency-group: maven - dependency-name: io.micrometer:micrometer-core dependency-version: 1.16.6 dependency-type: direct:production dependency-group: maven - dependency-name: com.fasterxml.jackson.core:jackson-databind dependency-version: 2.18.9 dependency-type: direct:production dependency-group: maven - dependency-name: com.fasterxml.jackson.core:jackson-databind dependency-version: 2.18.9 dependency-type: direct:production dependency-group: maven - dependency-name: io.micrometer:micrometer-core dependency-version: 1.16.6 dependency-type: direct:production dependency-group: maven - dependency-name: com.fasterxml.jackson.core:jackson-databind dependency-version: 2.18.9 dependency-type: direct:production dependency-group: maven - dependency-name: io.micrometer:micrometer-core dependency-version: 1.16.6 dependency-type: direct:production dependency-group: maven - dependency-name: com.fasterxml.jackson.core:jackson-databind dependency-version: 2.18.9 dependency-type: direct:production dependency-group: maven - dependency-name: io.micrometer:micrometer-core dependency-version: 1.16.6 dependency-type: direct:production dependency-group: maven - dependency-name: com.fasterxml.jackson.core:jackson-databind dependency-version: 2.18.9 dependency-type: direct:production dependency-group: maven - dependency-name: io.micrometer:micrometer-core dependency-version: 1.16.6 dependency-type: direct:production dependency-group: maven - dependency-name: com.fasterxml.jackson.core:jackson-databind dependency-version: 2.18.9 dependency-type: direct:production dependency-group: maven - dependency-name: io.micrometer:micrometer-core dependency-version: 1.16.6 dependency-type: direct:production dependency-group: maven - dependency-name: com.fasterxml.jackson.core:jackson-databind dependency-version: 2.18.9 dependency-type: direct:production dependency-group: maven - dependency-name: com.fasterxml.jackson.core:jackson-databind dependency-version: 2.18.9 dependency-type: direct:development dependency-group: maven - dependency-name: com.fasterxml.jackson.core:jackson-core dependency-version: 2.18.9 dependency-type: direct:production dependency-group: maven - dependency-name: com.fasterxml.jackson.core:jackson-databind dependency-version: 2.18.9 dependency-type: direct:production dependency-group: maven - dependency-name: com.fasterxml.jackson.core:jackson-databind dependency-version: 2.18.9 dependency-type: direct:production dependency-group: maven - dependency-name: io.netty:netty-codec-http dependency-version: 4.1.136.Final dependency-type: direct:production dependency-group: maven - dependency-name: com.fasterxml.jackson.core:jackson-databind dependency-version: 2.18.9 dependency-type: direct:production dependency-group: maven - dependency-name: com.fasterxml.jackson.core:jackson-databind dependency-version: 2.18.9 dependency-type: direct:production dependency-group: maven - dependency-name: com.fasterxml.jackson.core:jackson-databind dependency-version: 2.18.9 dependency-type: direct:production dependency-group: maven - dependency-name: com.fasterxml.jackson.core:jackson-core dependency-version: 2.18.9 dependency-type: direct:production dependency-group: maven - dependency-name: com.fasterxml.jackson.core:jackson-databind dependency-version: 2.18.9 dependency-type: direct:production dependency-group: maven - dependency-name: com.fasterxml.jackson.core:jackson-databind dependency-version: 2.18.9 dependency-type: direct:production dependency-group: maven - dependency-name: org.springframework:spring-core dependency-version: 7.0.8 dependency-type: direct:production dependency-group: maven - dependency-name: org.springframework.data:spring-data-commons dependency-version: 4.0.6 dependency-type: direct:production dependency-group: maven - dependency-name: org.springframework:spring-expression dependency-version: 7.0.8 dependency-type: direct:production dependency-group: maven - dependency-name: com.fasterxml.jackson.core:jackson-databind dependency-version: 2.18.9 dependency-type: direct:production dependency-group: maven - dependency-name: io.projectreactor.netty:reactor-netty dependency-version: 1.3.6 dependency-type: direct:production dependency-group: maven - dependency-name: com.fasterxml.jackson.core:jackson-databind dependency-version: 2.18.9 dependency-type: direct:production dependency-group: maven - dependency-name: org.springframework:spring-webmvc dependency-version: 7.0.8 dependency-type: direct:production dependency-group: maven - dependency-name: com.fasterxml.jackson.core:jackson-databind dependency-version: 2.18.9 dependency-type: direct:production dependency-group: maven - dependency-name: io.micrometer:micrometer-core dependency-version: 1.16.6 dependency-type: direct:production dependency-group: maven - dependency-name: org.springframework.data:spring-data-commons dependency-version: 4.0.6 dependency-type: direct:production dependency-group: maven - dependency-name: org.springframework.retry:spring-retry dependency-version: 2.0.13 dependency-type: direct:production dependency-group: maven - dependency-name: com.fasterxml.jackson.core:jackson-databind dependency-version: 2.18.9 dependency-type: direct:production dependency-group: maven - dependency-name: io.micrometer:micrometer-core dependency-version: 1.16.6 dependency-type: direct:production dependency-group: maven - dependency-name: org.springframework.data:spring-data-commons dependency-version: 4.0.6 dependency-type: direct:production dependency-group: maven - dependency-name: org.springframework.retry:spring-retry dependency-version: 2.0.13 dependency-type: direct:production dependency-group: maven - dependency-name: com.fasterxml.jackson.core:jackson-databind dependency-version: 2.18.9 dependency-type: direct:production dependency-group: maven - dependency-name: io.micrometer:micrometer-core dependency-version: 1.16.6 dependency-type: direct:production dependency-group: maven - dependency-name: org.springframework.data:spring-data-commons dependency-version: 4.0.6 dependency-type: direct:production dependency-group: maven - dependency-name: org.springframework.retry:spring-retry dependency-version: 2.0.13 dependency-type: direct:production dependency-group: maven - dependency-name: com.fasterxml.jackson.core:jackson-databind dependency-version: 2.18.9 dependency-type: direct:production dependency-group: maven - dependency-name: io.netty:netty-codec-http dependency-version: 4.1.136.Final dependency-type: direct:production dependency-group: maven ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Aug 8, 2026

Navigation Menu

Bump the maven group across 36 directories with 12 updates - #501

Bump the maven group across 36 directories with 12 updates#501
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/sdk/batch/microsoft-azure-batch/maven-98e0fe0799

dependabot Bot commented on behalf of github Aug 8, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Aug 8, 2026

netty-4.1.136.Final

What's Changed

netty-4.1.135.Final

Security fixes

netty-4.1.136.Final

What's Changed

netty-4.1.135.Final

Security fixes

netty-4.1.136.Final

What's Changed

netty-4.1.135.Final

Security fixes

netty-4.1.136.Final

What's Changed

netty-4.1.135.Final

Security fixes

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants