Skip to content

Bump the prod-deps group across 1 directory with 10 updates - #688

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/prod-deps-9120281533
Open

Bump the prod-deps group across 1 directory with 10 updates#688
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/prod-deps-9120281533

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 12, 2026

Copy link
Copy Markdown
Contributor

Bumps the prod-deps group with 10 updates in the / directory:

Package From To
org.graalvm.polyglot:polyglot 25.0.3 25.2.4
org.graalvm.python:python-language 25.0.3 25.2.4
org.graalvm.python:python-resources 25.0.3 25.2.4
org.graalvm.truffle:truffle-runtime 25.0.3 25.2.4
org.graalvm.truffle:truffle-api 25.0.3 25.2.4
tools.jackson:jackson-bom 3.2.0 3.2.1
com.fasterxml.jackson:jackson-bom 2.22.0 2.22.1
ch.qos.logback:logback-classic 1.5.37 1.6.1
org.junit:junit-bom 6.1.1 6.1.3
org.apache.maven.plugins:maven-jar-plugin 3.5.0 3.5.1

Updates org.graalvm.polyglot:polyglot from 25.0.3 to 25.2.4

Commits
  • b8108f6 [GR-76995] Update labsjdk to OracleJDK 25.0.4+7 and OpenJDK 25.0.4+7.
  • 77593ed follow up : update labsjdk-ce import to use OpenJDK 25.0.4 GA
  • 3fbdf6b [GR-77793] Adapt graal-publish-javadoc for the GraalVM 25.2.4 release.
  • 797a0a4 Adapt graal-publish-javadoc for the GraalVM 25.2.4 release.
  • f395d67 review threadService changes
  • 39445b2 Update JDK source references
  • a28b376 adopt JDK-8374998: Failing os::write - remove bad file
  • 5088d6d Check JVMCI versions by edition
  • 8a6679d Validate latest LabsJDK JVMCI build numbers
  • 9ffca86 standalone points-to: remove obsolete BasicMenuItemUI entrypoint
  • Additional commits viewable in compare view

Updates org.graalvm.python:python-language from 25.0.3 to 25.2.4

Release notes

Sourced from org.graalvm.python:python-language's releases.

GraalPy3.12 25.2.4

GraalPy is a Python 3.12-compliant runtime on top of GraalVM.

You can download GraalPy as a Native Standalone distribution for Oracle GraalVM or GraalVM Community Edition. Native Standalone contains a Native Image compiled launcher.

Starting with 25.0.3, JVM Standalone artifacts are no longer supported and are not included in this release.

To distinguish between Oracle GraalVM and GraalVM Community Edition, the Community Edition distribution has the suffix -community in its name.

Learn more about GraalPy and how to get started on the website: https://www.graalvm.org/python/.

GraalPy3.12 25.1.3

GraalPy is a Python 3.12-compliant runtime on top of GraalVM.

You can download GraalPy as a Native Standalone distribution for Oracle GraalVM or GraalVM Community Edition. Native Standalone contains a Native Image compiled launcher.

Starting with 25.0.3, JVM Standalone artifacts are no longer supported and are not included in this release.

To distinguish between Oracle GraalVM and GraalVM Community Edition, the Community Edition distribution has the suffix -community in its name.

Learn more about GraalPy and how to get started on the website: https://www.graalvm.org/python/.

Changelog

Sourced from org.graalvm.python:python-language's changelog.

Version 25.2.4

  • Windows standalone builds now use a native OS backend by default, improving compatibility for files, sockets, subprocesses, mmap, and Windows-specific modules compared to the Java-based backend.

Version 25.1.3

  • The standalone artifacts now include the Python version name before the Graal version. The new artifacts now start with graalpy<PYTHON_VERSION>-<GRAAL_VERSION>-<OPERATING_SYSTEM>-<ARCHITECTURE>.
  • Standalone JVM artifacts are no longer released as separate distributions. For standalone deployments, use the GraalPy native artifacts. If you require Java interoperability, use our jbang launcher (jbang graalpy@oracle/graalpython -c "print('hello from GraalPy')") or a custom embedding.
  • Add -X jit=0|1|2 presets to tune startup-heavy or throughput-oriented workloads, and make the GraalPy launcher default to the jit=1 preset.
  • Treat foreign buffer objects as Python buffer-compatible binary objects, so APIs like memoryview, bytes, bytearray, binascii.hexlify, and io.BytesIO work naturally on them when embedding GraalPy in Java. This allows passing binary data between Python and Java's ByteBuffer and ByteSequence types with minimal (sometimes zero) copies.
  • Add support for Truffle source options:
    • The python.Optimize option can be used to specify the optimization level, like the -O (level 1) and -OO (level 2) commandline options.
    • The python.NewGlobals option can be used to run a source with a fresh globals dictionary instead of the main module globals, which is useful for embeddings that want isolated top-level execution.
  • Intern string literals in source files
  • Allocation reporting via Truffle has been removed. Python object sizes were never reported correctly, so the data was misleading and there was a non-neglible overhead for object allocations even when reporting was inactive.
  • Better readline support via JLine. Autocompletion and history now works in pdb
  • Remove the intrinsified _ctypes module in favor of the native CPython version. This makes GraalPy's ctypes implementation more compatible and reduces the memory footprint of using ctypes.
  • Add a new, more natural style of subclassing Java classes from Python by passing the new_style=True keyword. Multiple levels of inheritance are supported, and super() calls both in the constructor override via __new__ as well as in Java method overrides work as expected.
  • Add polyglot.gil_locked_during_interop context manager. By default, the global interpreter lock (GIL) is unlocked when interacting with objects from another language, to give other Python threads a chance to run in parallel. While this avoids potential deadlocks, repeated unlocking and locking of the GIL can decrease performance, so this context manager can be used to keep the lock held around short-running interop.
  • Add Github workflows that run our gates from the same job definitions as our internal CI. This will make it easier for contributors opening PRs on Github to ensure code contributions pass the same tests that we are running internally.
  • Added support for specifying generics on foreign classes, and inheriting from such classes. Especially when using Java classes that support generics, this allows expressing the generic types in Python type annotations as well.
  • Added a new java backend for the pyexpat module that uses a Java XML parser instead of the native expat library. It can be useful when running without native access or multiple-context scenarios. This backend is the default when embedding and can be switched back to native expat by setting python.PyExpatModuleBackend option to native. Standalone distribution still defaults to native expat backend.
  • Add a new context option python.UnicodeCharacterDatabaseNativeFallback to control whether the ICU database may fall back to the native unicode character database from CPython for features and characters not supported by ICU. This requires native access to be enabled and is disabled by default for embeddings.
  • Add a new context option python.AllowSignalHandlers to control whether Python code may install signal handlers. This is disabled by default for Java embedding and enabled in the standalone.
  • Add an experimental python.InitializationEntropySource option to control the entropy source used for initialization-only randomness such as hash secret generation and random.Random(None) seeding. This means embeddings and tests can select deterministic or externally provided initialization entropy without affecting cryptographically relevant APIs like os.urandom() or random.SystemRandom().
  • Dispatch sys.audit events to hooks registered with sys.addaudithook, including audit events raised through the PySys_Audit C API.
  • Foreign temporal objects (dates, times, and timezones) are now given a Python class corresponding to their interop traits, i.e., date, time, datetime, or tzinfo. This allows any foreign objects with these traits to be used in place of the native Python types and Python methods available on these types work on the foreign types.
  • Make BouncyCastle an optional dependency for embedding use cases. BouncyCastle is only needed for legacy RSA, DSA, and EC privat keys versions 0 and 1. To support these from Python embeddings, BouncyCastle must now be explicitly enabled by adding the org.graalvm.python:python-bouncycastle-support Maven artifact.
  • The GraalPy Native standalone on Linux now uses a lower-footprint Native Image garbage collection configuration. This reduces resident set size (RSS) for many workloads, but may increase startup time and warmup time, and can slow down some workloads.

Version 25.0.1

  • Allow users to keep going on unsupported JDK/OS/ARCH combinations at their own risk by opting out of early failure using -Dtruffle.UseFallbackRuntime=true, -Dpolyglot.engine.userResourceCache=/set/to/a/writeable/dir, -Dpolyglot.engine.allowUnsupportedPlatform=true, and -Dpolyglot.python.UnsupportedPlatformEmulates=[linux|macos|windows] and -Dorg.graalvm.python.resources.exclude=native.files.

Version 25.0.0

  • sys.implementation.version now returns the GraalPy version instead of the Python version it implements. Also available as sys.graalpy_version_info for better discoverability by people already familiar with PyPy and its sys.pypy_version_info.
  • GRAALPY_VERSION_NUM C macro now inlcudes the release level and serial number at the end to conform to the hexversion format. This shouldn't break any existing comparisons.
  • dir(foreign_object) now returns both foreign methods and Python methods (it used to return only foreign methods).
  • Support __name__, __doc__, __text_signature__ fields on foreign executables to serve as their proper counterparts on the Python side. This is useful to, for example, use Java functional interfaces in lieu of Python functions for things like LangChain's @tool annotation that want to inspect the underlying function.
  • Remove support for running C extensions as LLVM bitcode. This also removes the related options python.UseSystemToolchain and python.NativeModules. Isolation of native code when embedding GraalPy into Java projects is now provided via the GraalVM enterprise edition polyglot isolate feature, which can launch in a separate external sub-process by setting the --engine.IsolateMode=external option.
  • Remove built-in HPy module. HPy can now be installed and used from the upstream sources.
  • Update Python standard library and core to 3.12.8.
  • Implement faulthandler.dump_traceback_later to better support testing frameworks that implement resilience to crashes.
  • Fix various issues affecting cibuildwheels on Windows, to make it easier for Python projects to provide native extensions for GraalPy on all supported platforms.
  • Add support for sharing Arrow arrays and tables between Java, PyArrow, and Pandas to avoid data copying when embedding those libraries into a Java project.
  • Enable FTS3, FTS4, FTS5, RTREE, and math function features in the bundled sqlite3 library.
  • Add support patches for Torch 2.7.0, PyGObject 3.52.3, xmlschema 4.0.0, lxml < 5.4.0, SciPy 1.15, jq 1.8.0, NumPy < 2.3, ormsgpack < 1.9.1, pandas 2.2.3, PyArrow 19.0, PyMuPDF 1.25.4.
  • The GraalPy Native standalone on Linux now uses the G1 garbage collector which is much faster.
  • The full-featured Python REPL is now available on GraalPy standalone builds for Windows.

Version 24.2.0

  • Updated developer metadata of Maven artifacts.
  • Added gradle plugin for polyglot embedding of Python packages into Java.

... (truncated)

Commits
  • 196ff1a [GR-77060] Use cached PyTupleCheckNode in PPickler.SaveNode.
  • 0f86089 Pin package "build==1.0.3" in test_wheel
  • 7993a46 Revert "Tune some inlining cutoffs"
  • 8624cdb Improve PyTupleCheckNode for interpreter performance
  • caec479 Use cached PyTupleCheckNode in PPickler.SaveNode
  • 469239c [GR-77167] Implement missing _operator methods
  • 5cd8896 Implement missing _operator methods
  • 016af19 [GR-76777] Implement sys._getframemodulename
  • 59a4362 Fall back to getting module name from globals
  • 3a78571 Remove email sending from bisection script
  • Additional commits viewable in compare view

Updates org.graalvm.python:python-resources from 25.0.3 to 25.2.4

Release notes

Sourced from org.graalvm.python:python-resources's releases.

GraalPy3.12 25.2.4

GraalPy is a Python 3.12-compliant runtime on top of GraalVM.

You can download GraalPy as a Native Standalone distribution for Oracle GraalVM or GraalVM Community Edition. Native Standalone contains a Native Image compiled launcher.

Starting with 25.0.3, JVM Standalone artifacts are no longer supported and are not included in this release.

To distinguish between Oracle GraalVM and GraalVM Community Edition, the Community Edition distribution has the suffix -community in its name.

Learn more about GraalPy and how to get started on the website: https://www.graalvm.org/python/.

GraalPy3.12 25.1.3

GraalPy is a Python 3.12-compliant runtime on top of GraalVM.

You can download GraalPy as a Native Standalone distribution for Oracle GraalVM or GraalVM Community Edition. Native Standalone contains a Native Image compiled launcher.

Starting with 25.0.3, JVM Standalone artifacts are no longer supported and are not included in this release.

To distinguish between Oracle GraalVM and GraalVM Community Edition, the Community Edition distribution has the suffix -community in its name.

Learn more about GraalPy and how to get started on the website: https://www.graalvm.org/python/.

Changelog

Sourced from org.graalvm.python:python-resources's changelog.

Version 25.2.4

  • Windows standalone builds now use a native OS backend by default, improving compatibility for files, sockets, subprocesses, mmap, and Windows-specific modules compared to the Java-based backend.

Version 25.1.3

  • The standalone artifacts now include the Python version name before the Graal version. The new artifacts now start with graalpy<PYTHON_VERSION>-<GRAAL_VERSION>-<OPERATING_SYSTEM>-<ARCHITECTURE>.
  • Standalone JVM artifacts are no longer released as separate distributions. For standalone deployments, use the GraalPy native artifacts. If you require Java interoperability, use our jbang launcher (jbang graalpy@oracle/graalpython -c "print('hello from GraalPy')") or a custom embedding.
  • Add -X jit=0|1|2 presets to tune startup-heavy or throughput-oriented workloads, and make the GraalPy launcher default to the jit=1 preset.
  • Treat foreign buffer objects as Python buffer-compatible binary objects, so APIs like memoryview, bytes, bytearray, binascii.hexlify, and io.BytesIO work naturally on them when embedding GraalPy in Java. This allows passing binary data between Python and Java's ByteBuffer and ByteSequence types with minimal (sometimes zero) copies.
  • Add support for Truffle source options:
    • The python.Optimize option can be used to specify the optimization level, like the -O (level 1) and -OO (level 2) commandline options.
    • The python.NewGlobals option can be used to run a source with a fresh globals dictionary instead of the main module globals, which is useful for embeddings that want isolated top-level execution.
  • Intern string literals in source files
  • Allocation reporting via Truffle has been removed. Python object sizes were never reported correctly, so the data was misleading and there was a non-neglible overhead for object allocations even when reporting was inactive.
  • Better readline support via JLine. Autocompletion and history now works in pdb
  • Remove the intrinsified _ctypes module in favor of the native CPython version. This makes GraalPy's ctypes implementation more compatible and reduces the memory footprint of using ctypes.
  • Add a new, more natural style of subclassing Java classes from Python by passing the new_style=True keyword. Multiple levels of inheritance are supported, and super() calls both in the constructor override via __new__ as well as in Java method overrides work as expected.
  • Add polyglot.gil_locked_during_interop context manager. By default, the global interpreter lock (GIL) is unlocked when interacting with objects from another language, to give other Python threads a chance to run in parallel. While this avoids potential deadlocks, repeated unlocking and locking of the GIL can decrease performance, so this context manager can be used to keep the lock held around short-running interop.
  • Add Github workflows that run our gates from the same job definitions as our internal CI. This will make it easier for contributors opening PRs on Github to ensure code contributions pass the same tests that we are running internally.
  • Added support for specifying generics on foreign classes, and inheriting from such classes. Especially when using Java classes that support generics, this allows expressing the generic types in Python type annotations as well.
  • Added a new java backend for the pyexpat module that uses a Java XML parser instead of the native expat library. It can be useful when running without native access or multiple-context scenarios. This backend is the default when embedding and can be switched back to native expat by setting python.PyExpatModuleBackend option to native. Standalone distribution still defaults to native expat backend.
  • Add a new context option python.UnicodeCharacterDatabaseNativeFallback to control whether the ICU database may fall back to the native unicode character database from CPython for features and characters not supported by ICU. This requires native access to be enabled and is disabled by default for embeddings.
  • Add a new context option python.AllowSignalHandlers to control whether Python code may install signal handlers. This is disabled by default for Java embedding and enabled in the standalone.
  • Add an experimental python.InitializationEntropySource option to control the entropy source used for initialization-only randomness such as hash secret generation and random.Random(None) seeding. This means embeddings and tests can select deterministic or externally provided initialization entropy without affecting cryptographically relevant APIs like os.urandom() or random.SystemRandom().
  • Dispatch sys.audit events to hooks registered with sys.addaudithook, including audit events raised through the PySys_Audit C API.
  • Foreign temporal objects (dates, times, and timezones) are now given a Python class corresponding to their interop traits, i.e., date, time, datetime, or tzinfo. This allows any foreign objects with these traits to be used in place of the native Python types and Python methods available on these types work on the foreign types.
  • Make BouncyCastle an optional dependency for embedding use cases. BouncyCastle is only needed for legacy RSA, DSA, and EC privat keys versions 0 and 1. To support these from Python embeddings, BouncyCastle must now be explicitly enabled by adding the org.graalvm.python:python-bouncycastle-support Maven artifact.
  • The GraalPy Native standalone on Linux now uses a lower-footprint Native Image garbage collection configuration. This reduces resident set size (RSS) for many workloads, but may increase startup time and warmup time, and can slow down some workloads.

Version 25.0.1

  • Allow users to keep going on unsupported JDK/OS/ARCH combinations at their own risk by opting out of early failure using -Dtruffle.UseFallbackRuntime=true, -Dpolyglot.engine.userResourceCache=/set/to/a/writeable/dir, -Dpolyglot.engine.allowUnsupportedPlatform=true, and -Dpolyglot.python.UnsupportedPlatformEmulates=[linux|macos|windows] and -Dorg.graalvm.python.resources.exclude=native.files.

Version 25.0.0

  • sys.implementation.version now returns the GraalPy version instead of the Python version it implements. Also available as sys.graalpy_version_info for better discoverability by people already familiar with PyPy and its sys.pypy_version_info.
  • GRAALPY_VERSION_NUM C macro now inlcudes the release level and serial number at the end to conform to the hexversion format. This shouldn't break any existing comparisons.
  • dir(foreign_object) now returns both foreign methods and Python methods (it used to return only foreign methods).
  • Support __name__, __doc__, __text_signature__ fields on foreign executables to serve as their proper counterparts on the Python side. This is useful to, for example, use Java functional interfaces in lieu of Python functions for things like LangChain's @tool annotation that want to inspect the underlying function.
  • Remove support for running C extensions as LLVM bitcode. This also removes the related options python.UseSystemToolchain and python.NativeModules. Isolation of native code when embedding GraalPy into Java projects is now provided via the GraalVM enterprise edition polyglot isolate feature, which can launch in a separate external sub-process by setting the --engine.IsolateMode=external option.
  • Remove built-in HPy module. HPy can now be installed and used from the upstream sources.
  • Update Python standard library and core to 3.12.8.
  • Implement faulthandler.dump_traceback_later to better support testing frameworks that implement resilience to crashes.
  • Fix various issues affecting cibuildwheels on Windows, to make it easier for Python projects to provide native extensions for GraalPy on all supported platforms.
  • Add support for sharing Arrow arrays and tables between Java, PyArrow, and Pandas to avoid data copying when embedding those libraries into a Java project.
  • Enable FTS3, FTS4, FTS5, RTREE, and math function features in the bundled sqlite3 library.
  • Add support patches for Torch 2.7.0, PyGObject 3.52.3, xmlschema 4.0.0, lxml < 5.4.0, SciPy 1.15, jq 1.8.0, NumPy < 2.3, ormsgpack < 1.9.1, pandas 2.2.3, PyArrow 19.0, PyMuPDF 1.25.4.
  • The GraalPy Native standalone on Linux now uses the G1 garbage collector which is much faster.
  • The full-featured Python REPL is now available on GraalPy standalone builds for Windows.

Version 24.2.0

  • Updated developer metadata of Maven artifacts.
  • Added gradle plugin for polyglot embedding of Python packages into Java.

... (truncated)

Commits
  • 196ff1a [GR-77060] Use cached PyTupleCheckNode in PPickler.SaveNode.
  • 0f86089 Pin package "build==1.0.3" in test_wheel
  • 7993a46 Revert "Tune some inlining cutoffs"
  • 8624cdb Improve PyTupleCheckNode for interpreter performance
  • caec479 Use cached PyTupleCheckNode in PPickler.SaveNode
  • 469239c [GR-77167] Implement missing _operator methods
  • 5cd8896 Implement missing _operator methods
  • 016af19 [GR-76777] Implement sys._getframemodulename
  • 59a4362 Fall back to getting module name from globals
  • 3a78571 Remove email sending from bisection script
  • Additional commits viewable in compare view

Updates org.graalvm.truffle:truffle-runtime from 25.0.3 to 25.2.4

Commits
  • b8108f6 [GR-76995] Update labsjdk to OracleJDK 25.0.4+7 and OpenJDK 25.0.4+7.
  • 77593ed follow up : update labsjdk-ce import to use OpenJDK 25.0.4 GA
  • 3fbdf6b [GR-77793] Adapt graal-publish-javadoc for the GraalVM 25.2.4 release.
  • 797a0a4 Adapt graal-publish-javadoc for the GraalVM 25.2.4 release.
  • f395d67 review threadService changes
  • 39445b2 Update JDK source references
  • a28b376 adopt JDK-8374998: Failing os::write - remove bad file
  • 5088d6d Check JVMCI versions by edition
  • 8a6679d Validate latest LabsJDK JVMCI build numbers
  • 9ffca86 standalone points-to: remove obsolete BasicMenuItemUI entrypoint
  • Additional commits viewable in compare view

Updates org.graalvm.truffle:truffle-api from 25.0.3 to 25.2.4

Commits
  • b8108f6 [GR-76995] Update labsjdk to OracleJDK 25.0.4+7 and OpenJDK 25.0.4+7.
  • 77593ed follow up : update labsjdk-ce import to use OpenJDK 25.0.4 GA
  • 3fbdf6b [GR-77793] Adapt graal-publish-javadoc for the GraalVM 25.2.4 release.
  • 797a0a4 Adapt graal-publish-javadoc for the GraalVM 25.2.4 release.
  • f395d67 review threadService changes
  • 39445b2 Update JDK source references
  • a28b376 adopt JDK-8374998: Failing os::write - remove bad file
  • 5088d6d Check JVMCI versions by edition
  • 8a6679d Validate latest LabsJDK JVMCI build numbers
  • 9ffca86 standalone points-to: remove obsolete BasicMenuItemUI entrypoint
  • Additional commits viewable in compare view

Updates org.graalvm.python:python-language from 25.0.3 to 25.2.4

Release notes

Sourced from org.graalvm.python:python-language's releases.

GraalPy3.12 25.2.4

GraalPy is a Python 3.12-compliant runtime on top of GraalVM.

You can download GraalPy as a Native Standalone distribution for Oracle GraalVM or GraalVM Community Edition. Native Standalone contains a Native Image compiled launcher.

Starting with 25.0.3, JVM Standalone artifacts are no longer supported and are not included in this release.

To distinguish between Oracle GraalVM and GraalVM Community Edition, the Community Edition distribution has the suffix -community in its name.

Learn more about GraalPy and how to get started on the website: https://www.graalvm.org/python/.

GraalPy3.12 25.1.3

GraalPy is a Python 3.12-compliant runtime on top of GraalVM.

You can download GraalPy as a Native Standalone distribution for Oracle GraalVM or GraalVM Community Edition. Native Standalone contains a Native Image compiled launcher.

Starting with 25.0.3, JVM Standalone artifacts are no longer supported and are not included in this release.

To distinguish between Oracle GraalVM and GraalVM Community Edition, the Community Edition distribution has the suffix -community in its name.

Learn more about GraalPy and how to get started on the website: https://www.graalvm.org/python/.

Changelog

Sourced from org.graalvm.python:python-language's changelog.

Version 25.2.4

  • Windows standalone builds now use a native OS backend by default, improving compatibility for files, sockets, subprocesses, mmap, and Windows-specific modules compared to the Java-based backend.

Version 25.1.3

  • The standalone artifacts now include the Python version name before the Graal version. The new artifacts now start with graalpy<PYTHON_VERSION>-<GRAAL_VERSION>-<OPERATING_SYSTEM>-<ARCHITECTURE>.
  • Standalone JVM artifacts are no longer released as separate distributions. For standalone deployments, use the GraalPy native artifacts. If you require Java interoperability, use our jbang launcher (jbang graalpy@oracle/graalpython -c "print('hello from GraalPy')") or a custom embedding.
  • Add -X jit=0|1|2 presets to tune startup-heavy or throughput-oriented workloads, and make the GraalPy launcher default to the jit=1 preset.
  • Treat foreign buffer objects as Python buffer-compatible binary objects, so APIs like memoryview, bytes, bytearray, binascii.hexlify, and io.BytesIO work naturally on them when embedding GraalPy in Java. This allows passing binary data between Python and Java's ByteBuffer and ByteSequence types with minimal (sometimes zero) copies.
  • Add support for Truffle source options:
    • The python.Optimize option can be used to specify the optimization level, like the -O (level 1) and -OO (level 2) commandline options.
    • The python.NewGlobals option can be used to run a source with a fresh globals dictionary instead of the main module globals, which is useful for embeddings that want isolated top-level execution.
  • Intern string literals in source files
  • Allocation reporting via Truffle has been removed. Python object sizes were never reported correctly, so the data was misleading and there was a non-neglible overhead for object allocations even when reporting was inactive.
  • Better readline support via JLine. Autocompletion and history now works in pdb
  • Remove the intrinsified _ctypes module in favor of the native CPython version. This makes GraalPy's ctypes implementation more compatible and reduces the memory footprint of using ctypes.
  • Add a new, more natural style of subclassing Java classes from Python by passing the new_style=True keyword. Multiple levels of inheritance are supported, and super() calls both in the constructor override via __new__ as well as in Java method overrides work as expected.
  • Add polyglot.gil_locked_during_interop context manager. By default, the global interpreter lock (GIL) is unlocked when interacting with objects from another language, to give other Python threads a chance to run in parallel. While this avoids potential deadlocks, repeated unlocking and locking of the GIL can decrease performance, so this context manager can be used to keep the lock held around short-running interop.
  • Add Github workflows that run our gates from the same job definitions as our internal CI. This will make it easier for contributors opening PRs on Github to ensure code contributions pass the same tests that we are running internally.
  • Added support for specifying generics on foreign classes, and inheriting from such classes. Especially when using Java classes that support generics, this allows expressing the generic types in Python type annotations as well.
  • Added a new java backend for the pyexpat module that uses a Java XML parser instead of the native expat library. It can be useful when running without native access or multiple-context scenarios. This backend is the default when embedding and can be switched back to native expat by setting python.PyExpatModuleBackend option to native. Standalone distribution still defaults to native expat backend.
  • Add a new context option python.UnicodeCharacterDatabaseNativeFallback to control whether the ICU database may fall back to the native unicode character database from CPython for features and characters not supported by ICU. This requires native access to be enabled and is disabled by default for embeddings.
  • Add a new context option python.AllowSignalHandlers to control whether Python code may install signal handlers. This is disabled by default for Java embedding and enabled in the standalone.
  • Add an experimental python.InitializationEntropySource option to control the entropy source used for initialization-only randomness such as hash secret generation and random.Random(None) seeding. This means embeddings and tests can select deterministic or externally provided initialization entropy without affecting cryptographically relevant APIs like os.urandom() or random.SystemRandom().
  • Dispatch sys.audit events to hooks registered with sys.addaudithook, including audit events raised through the PySys_Audit C API.
  • Foreign temporal objects (dates, times, and timezones) are now given a Python class corresponding to their interop traits, i.e., date, time, datetime, or tzinfo. This allows any foreign objects with these traits to be used in place of the native Python types and Python methods available on these types work on the foreign types.
  • Make BouncyCastle an optional dependency for embedding use cases. BouncyCastle is only needed for legacy RSA, DSA, and EC privat keys versions 0 and 1. To support these from Python embeddings, BouncyCastle must now be explicitly enabled by adding the org.graalvm.python:python-bouncycastle-support Maven artifact.
  • The GraalPy Native standalone on Linux now uses a lower-footprint Native Image garbage collection configuration. This reduces resident set size (RSS) for many workloads, but may increase startup time and warmup time, and can slow down some workloads.

Version 25.0.1

  • Allow users to keep going on unsupported JDK/OS/ARCH combinations at their own risk by opting out of early failure using -Dtruffle.UseFallbackRuntime=true, -Dpolyglot.engine.userResourceCache=/set/to/a/writeable/dir, -Dpolyglot.engine.allowUnsupportedPlatform=true, and -Dpolyglot.python.UnsupportedPlatformEmulates=[linux|macos|windows] and -Dorg.graalvm.python.resources.exclude=native.files.

Version 25.0.0

  • sys.implementation.version now returns the GraalPy version instead of the Python version it implements. Also available as sys.graalpy_version_info for better discoverability by people already familiar with PyPy and its sys.pypy_version_info.
  • GRAALPY_VERSION_NUM C macro now inlcudes the release level and serial number at the end to conform to the hexversion format. This shouldn't break any existing comparisons.
  • dir(foreign_object) now returns both foreign methods and Python methods (it used to return only foreign methods).
  • Support __name__, __doc__, __text_signature__ fields on foreign executables to serve as their proper counterparts on the Python side. This is useful to, for example, use Java functional interfaces in lieu of Python functions for things like LangChain's @tool annotation that want to inspect the underlying function.
  • Remove support for running C extensions as LLVM bitcode. This also removes the related options python.UseSystemToolchain and python.NativeModules. Isolation of native code when embedding GraalPy into Java projects is now provided via the GraalVM enterprise edition polyglot isolate feature, which can launch in a separate external sub-process by setting the --engine.IsolateMode=external option.
  • Remove built-in HPy module. HPy can now be installed and used from the upstream sources.
  • Update Python standard library and core to 3.12.8.
  • Implement faulthandler.dump_traceback_later to better support testing frameworks that implement resilience to crashes.
  • Fix various issues affecting cibuildwheels on Windows, to make it easier for Python projects to provide native extensions for GraalPy on all supported platforms.
  • Add support for sharing Arrow arrays and tables between Java, PyArrow, and Pandas to avoid data copying when embedding those libraries into a Java project.
  • Enable FTS3, FTS4, FTS5, RTREE, and math function features in the bundled sqlite3 library.
  • Add support patches for Torch 2.7.0, PyGObject 3.52.3, xmlschema 4.0.0, lxml < 5.4.0, SciPy 1.15, jq 1.8.0, NumPy < 2.3, ormsgpack < 1.9.1, pandas 2.2.3, PyArrow 19.0, PyMuPDF 1.25.4.
  • The GraalPy Native standalone on Linux now uses the G1 garbage collector which is much faster.
  • The full-featured Python REPL is now available on GraalPy standalone builds for Windows.

Version 24.2.0

  • Updated developer metadata of Maven artifacts.
  • Added gradle plugin for polyglot embedding of Python packages into Java.

... (truncated)

Commits
  • 196ff1a [GR-77060] Use cached PyTupleCheckNode in PPickler.SaveNode.
  • 0f86089 Pin package "build==1.0.3" in test_wheel
  • 7993a46 Revert "Tune some inlining cutoffs"
  • 8624cdb Improve PyTupleCheckNode for interpreter performance
  • caec479 Use cached PyTupleCheckNode in PPickler.SaveNode
  • 469239c [GR-77167] Implement missing _operator methods
  • 5cd8896 Implement missing _operator methods
  • 016af19 [GR-76777] Implement sys._getframemodulename
  • 59a4362 Fall back to getting module name from globals
  • 3a78571 Remove email sending from bisection script
  • Additional commits viewable in compare view

Updates org.graalvm.python:python-resources from 25.0.3 to 25.2.4

Release notes

Sourced from org.graalvm.python:python-resources's releases.

GraalPy3.12 25.2.4

GraalPy is a Python 3.12-compliant runtime on top of GraalVM.

You can download GraalPy as a Native Standalone distribution for Oracle GraalVM or GraalVM Community Edition. Native Standalone contains a Native Image compiled launcher.

Starting with 25.0.3, JVM Standalone artifacts are no longer supported and are not included in this release.

To distinguish between Oracle GraalVM and GraalVM Community Edition, the Community Edition distribution has the suffix -community in its name.

Learn more about GraalPy and how to get started on the website: https://www.graalvm.org/python/.

GraalPy3.12 25.1.3

GraalPy is a Python 3.12-compliant runtime on top of GraalVM.

You can download GraalPy as a Native Standalone distribution for Oracle GraalVM or GraalVM Community Edition. Native Standalone contains a Native Image compiled launcher.

Starting with 25.0.3, JVM Standalone artifacts are no longer supported and are not included in this release.

To distinguish between Oracle GraalVM and GraalVM Community Edition, the Community Edition distribution has the suffix -community in its name.

Learn more about GraalPy and how to get started on the website: https://www.graalvm.org/python/.

Changelog

Sourced from org.graalvm.python:python-resources's changelog.

Version 25.2.4

  • Windows standalone builds now use a native OS backend by default, improving compatibility for files, sockets, subprocesses, mmap, and Windows-specific modules compared to the Java-based backend.

Version 25.1.3

  • The standalone artifacts now include the Python version name before the Graal version. The new artifacts now start with graalpy<PYTHON_VERSION>-<GRAAL_VERSION>-<OPERATING_SYSTEM>-<ARCHITECTURE>.
  • Standalone JVM artifacts are no longer released as separate distributions. For standalone deployments, use the GraalPy native artifacts. If you require Java interoperability, use our jbang launcher (jbang graalpy@oracle/graalpython -c "print('hello from GraalPy')") or a custom embedding.
  • Add -X jit=0|1|2 presets to tune startup-heavy or throughput-oriented workloads, and make the GraalPy launcher default to the jit=1 preset.
  • Treat foreign buffer objects as Python buffer-compatible binary objects, so APIs like memoryview, bytes, bytearray, binascii.hexlify, and io.BytesIO work naturally on them when embedding GraalPy in Java. This allows passing binary data between Python and Java's ByteBuffer and ByteSequence types with minimal (sometimes zero) copies.
  • Add support for Truffle source options:
    • The python.Optimize option can be used to specify the optimization level, like the -O (level 1) and -OO (level 2) commandline options.
    • The python.NewGlobals option can be used to run a source with a fresh globals dictionary instead of the main module globals, which is useful for embeddings that want isolated top-level execution.
  • Intern string literals in source files
  • Allocation reporting via Truffle has been removed. Python object sizes were never reported correctly, so the data was misleading and there was a non-neglible overhead for object allocations even when reporting was inactive.
  • Better readline support via JLine. Autocompletion and history now works in pdb
  • Remove the intrinsified _ctypes module in favor of the native CPython version. This makes GraalPy's ctypes implementation more compatible and reduces the memory footprint of using ctypes.
  • Add a new, more natural style of subclassing Java classes from Python by passing the new_style=True keyword. Multiple levels of inheritance are supported, and super() calls both in the constructor override via __new__ as well as in Java method overrides work as expected.
  • Add polyglot.gil_locked_during_interop context manager. By default, the global interpreter lock (GIL) is unlocked when interacting with objects from another language, to give other Python threads a chance to run in parallel. While this avoids potential deadlocks, repeated unlocking and locking of the GIL can decrease performance, so this context manager can be used to keep the lock held around short-running interop.
  • Add Github workflows that run our gates from the same job definitions as our internal CI. This will make it easier for contributors opening PRs on Github to ensure code contributions pass the same tests that we are running internally.
  • Added support for specifying generics on foreign classes, and inheriting from such classes. Especially when using Java classes that support generics, this allows expressing the generic types in Python type annotations as well.
  • Added a new java backend for the pyexpat module that uses a Java XML parser instead of the native expat library. It can be useful when running without native access or multiple-context scenarios. This backend is the default when embedding and can be switched back to native expat by setting python.PyExpatModuleBackend option to native. Standalone distribution still defaults to native expat backend.
  • Add a new context option python.UnicodeCharacterDatabaseNativeFallback to control whether the ICU database may fall back to the native unicode character database from CPython for features and characters not supported by ICU. This requires native access to be enabled and is disabled by default for embeddings.
  • Add a new context option python.AllowSignalHandlers to control whether Python code may install signal handlers. This is disabled by default for Java embedding and enabled in the standalone.
  • Add an experimental python.InitializationEntropySource option to control the entropy source used for initialization-only randomness such as hash secret generation and random.Random(None) seeding. This means embeddings and tests can select deterministic or externally provided initialization entropy without affecting cryptographically relevant APIs like os.urandom() or random.SystemRandom().
  • Dispatch sys.audit events to hooks registered with sys.addaudithook, including audit events raised through the PySys_Audit C API.
  • Foreign temporal objects (dates, times, and timezones) are now given a Python class corresponding to their interop traits, i.e., date, time, datetime, or tzinfo. This allows any foreign objects with these traits to be used in place of the native Python types and Python methods available on these types work on the foreign types.
  • Make BouncyCastle an optional dependency for embedding use cases. BouncyCastle is only needed for legacy RSA, DSA, and EC privat keys versions 0 and 1. To support these from Python embeddings, BouncyCastle must now be explicitly enabled by adding the org.graalvm.python:python-bouncycastle-support Maven artifact.
  • The GraalPy Native standalone on Linux now uses a lower-footprint Native Image garbage collection configuration. This reduces resident set size (RSS) for many workloads, but may increase startup time and warmup time, and can slow down some workloads.

Version 25.0.1

  • Allow users to keep going on unsupported JDK/OS/ARCH combinations at their own risk by opting out of early failure using -Dtruffle.UseFallbackRuntime=true, -Dpolyglot.engine.userResourceCache=/set/to/a/writeable/dir, -Dpolyglot.engine.allowUnsupportedPlatform=true, and -Dpolyglot.python.UnsupportedPlatformEmulates=[linux|macos|windows] and -Dorg.graalvm.python.resources.exclude=native.files.

Version 25.0.0

  • sys.implementation.version now returns the GraalPy version instead of the Python version it implements. Also available as sys.graalpy_version_info for better discoverability by people already familiar with PyPy and its sys.pypy_version_info.
  • GRAALPY_VERSION_NUM C macro now inlcudes the release level and serial number at the end to conform to the hexversion format. This shouldn't break any existing comparisons.
  • dir(foreign_object) now returns both foreign methods and Python methods (it used to return only foreign methods).
  • Support __name__, __doc__, __text_signature__ fields on foreign executables to serve as their proper counterparts on the Python side. This is useful to, for example, use Java functional interfaces in lieu of Python functions for things like LangChain's @tool annotation that want to inspect the underlying function.
  • Remove support for running C extensions as LLVM bitcode. This also removes the related options python.UseSystemToolchain and python.NativeModules. Isolation of native code when embedding GraalPy into Java projects is now provided via the GraalVM enterprise edition polyglot isolate feature, which can launch in a separate external sub-process by setting the --engine.IsolateMode=external option.
  • Remove built-in HPy module. HPy can now be installed and used from the upstream sources.
  • Update Python standard library and core to 3.12.8.
  • Implement faulthandler.dump_traceback_later to better support testing frameworks that implement resilience to crashes.
  • Fix various issues affecting cibuildwheels on Windows, to make it easier for Python projects to provide native extensions for GraalPy on all supported platforms.
  • Add support for sharing Arrow arrays and tables between Java, PyArrow, and Pandas to avoid data copying when embedding those libraries into a Java project.
  • Enable FTS3, FTS4, FTS5, RTREE, and math function features in the bundled sqlite3 library.
  • Add support patches for Torch 2.7.0, PyGObject 3.52.3, xmlschema 4.0.0, lxml < 5.4.0, SciPy 1.15, jq 1.8.0, NumPy < 2.3, ormsgpack < 1.9.1, pandas 2.2.3, PyArrow 19.0, PyMuPDF 1.25.4.
  • The GraalPy Native standalone on Linux now uses the G1 garbage collector which is much faster.
  • The full-featured Python REPL is now available on GraalPy standalone builds for Windows.

Version 24.2.0

  • Updated developer metadata of Maven artifacts.
  • Added gradle plugin for polyglot embedding of Python packages into Java.

... (truncated)

Commits
  • 196ff1a [GR-77060] Use cached PyTupleCheckNode in PPickler.SaveNode.
  • 0f86089 Pin package "build==1.0.3" in test_wheel
  • 7993a46 Revert "Tune some inlining cutoffs"
  • 8624cdb Improve PyTupleCheckNode for interpreter performance
  • caec479 Use cached PyTupleCheckNode in PPickler.SaveNode
  • 469239c [GR-77167] Implement missing _operator methods
  • 5cd8896 Implement missing _operator methods
  • 016af19 [GR-76777] Implement sys._getframemodulename
  • 59a4362 Fall back to getting module name from globals
  • 3a78571 Remove email sending from bisection script
  • Additional commits viewable in compare view

Updates org.graalvm.truffle:truffle-runtime from 25.0.3 to 25.2.4

Commits
  • b8108f6 [GR-76995] Update labsjdk to OracleJDK 25.0.4+7 and OpenJDK 25.0.4+7.
  • 77593ed follow up : update labsjdk-ce import to use OpenJDK 25.0.4 GA
  • 3fbdf6b [GR-77793] Adapt graal-publish-javadoc for the GraalVM 25.2.4 release.
  • 797a0a4 Adapt graal-publish-javadoc for the GraalVM 25.2.4 release.
  • f395d67 review threadService changes
  • 39445b2 Update JDK source references
  • a28b376 adopt JDK-8374998: Failing os::write - remove bad file
  • 5088d6d Check JVMCI versions by edition
  • 8a6679d Validate latest LabsJDK JVMCI build numbers
  • 9ffca86 standalone points-to: remove obsolete BasicMenuItemUI entrypoint
  • Additional commits viewable in compare view

Updates org.graalvm.truffle:truffle-api from 25.0.3 to 25.2.4

Commits
  • b8108f6 [GR-76995] Update labsjdk to OracleJDK 25.0.4+7 and OpenJDK 25.0.4+7.
  • 77593ed follow up : update labsjdk-ce import to use OpenJDK 25.0.4 GA
  • 3fbdf6b [GR-77793] Adapt graal-publish-javadoc for the GraalVM 25.2.4 release.
  • 797a0a4 Adapt graal-publish-javadoc for the GraalVM 25.2.4 release.
  • f395d67 review threadService changes

@dependabot
Bump the prod-deps group across 1 directory with 10 updates
7a3b9b2 
Bumps the prod-deps group with 10 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [org.graalvm.polyglot:polyglot](https://github.com/oracle/graal) | `25.0.3` | `25.2.4` |
| [org.graalvm.python:python-language](https://github.com/graalvm/graalpython) | `25.0.3` | `25.2.4` |
| [org.graalvm.python:python-resources](https://github.com/graalvm/graalpython) | `25.0.3` | `25.2.4` |
| [org.graalvm.truffle:truffle-runtime](https://github.com/oracle/graal) | `25.0.3` | `25.2.4` |
| [org.graalvm.truffle:truffle-api](https://github.com/oracle/graal) | `25.0.3` | `25.2.4` |
| [tools.jackson:jackson-bom](https://github.com/FasterXML/jackson-bom) | `3.2.0` | `3.2.1` |
| [com.fasterxml.jackson:jackson-bom](https://github.com/FasterXML/jackson-bom) | `2.22.0` | `2.22.1` |
| [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) | `1.5.37` | `1.6.1` |
| [org.junit:junit-bom](https://github.com/junit-team/junit-framework) | `6.1.1` | `6.1.3` |
| [org.apache.maven.plugins:maven-jar-plugin](https://github.com/apache/maven-jar-plugin) | `3.5.0` | `3.5.1` |



Updates `org.graalvm.polyglot:polyglot` from 25.0.3 to 25.2.4
- [Release notes](https://github.com/oracle/graal/releases)
- [Commits](oracle/graal@vm-25.0.3...vm-25.2.4)

Updates `org.graalvm.python:python-language` from 25.0.3 to 25.2.4
- [Release notes](https://github.com/graalvm/graalpython/releases)
- [Changelog](https://github.com/oracle/graalpython/blob/master/CHANGELOG.md)
- [Commits](oracle/graalpython@vm-25.0.3...vm-25.2.4)

Updates `org.graalvm.python:python-resources` from 25.0.3 to 25.2.4
- [Release notes](https://github.com/graalvm/graalpython/releases)
- [Changelog](https://github.com/oracle/graalpython/blob/master/CHANGELOG.md)
- [Commits](oracle/graalpython@vm-25.0.3...vm-25.2.4)

Updates `org.graalvm.truffle:truffle-runtime` from 25.0.3 to 25.2.4
- [Release notes](https://github.com/oracle/graal/releases)
- [Commits](oracle/graal@vm-25.0.3...vm-25.2.4)

Updates `org.graalvm.truffle:truffle-api` from 25.0.3 to 25.2.4
- [Release notes](https://github.com/oracle/graal/releases)
- [Commits](oracle/graal@vm-25.0.3...vm-25.2.4)

Updates `org.graalvm.python:python-language` from 25.0.3 to 25.2.4
- [Release notes](https://github.com/graalvm/graalpython/releases)
- [Changelog](https://github.com/oracle/graalpython/blob/master/CHANGELOG.md)
- [Commits](oracle/graalpython@vm-25.0.3...vm-25.2.4)

Updates `org.graalvm.python:python-resources` from 25.0.3 to 25.2.4
- [Release notes](https://github.com/graalvm/graalpython/releases)
- [Changelog](https://github.com/oracle/graalpython/blob/master/CHANGELOG.md)
- [Commits](oracle/graalpython@vm-25.0.3...vm-25.2.4)

Updates `org.graalvm.truffle:truffle-runtime` from 25.0.3 to 25.2.4
- [Release notes](https://github.com/oracle/graal/releases)
- [Commits](oracle/graal@vm-25.0.3...vm-25.2.4)

Updates `org.graalvm.truffle:truffle-api` from 25.0.3 to 25.2.4
- [Release notes](https://github.com/oracle/graal/releases)
- [Commits](oracle/graal@vm-25.0.3...vm-25.2.4)

Updates `tools.jackson:jackson-bom` from 3.2.0 to 3.2.1
- [Commits](FasterXML/jackson-bom@jackson-bom-3.2.0...jackson-bom-3.2.1)

Updates `com.fasterxml.jackson:jackson-bom` from 2.22.0 to 2.22.1
- [Commits](FasterXML/jackson-bom@jackson-bom-2.22.0...jackson-bom-2.22.1)

Updates `ch.qos.logback:logback-classic` from 1.5.37 to 1.6.1
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](qos-ch/logback@v_1.5.37...v_1.6.1)

Updates `org.junit:junit-bom` from 6.1.1 to 6.1.3
- [Release notes](https://github.com/junit-team/junit-framework/releases)
- [Commits](junit-team/junit-framework@r6.1.1...r6.1.3)

Updates `org.apache.maven.plugins:maven-jar-plugin` from 3.5.0 to 3.5.1
- [Release notes](https://github.com/apache/maven-jar-plugin/releases)
- [Commits](apache/maven-jar-plugin@maven-jar-plugin-3.5.0...maven-jar-plugin-3.5.1)

---
updated-dependencies:
- dependency-name: org.graalvm.polyglot:polyglot
  dependency-version: 25.2.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: org.graalvm.python:python-language
  dependency-version: 25.2.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: org.graalvm.python:python-resources
  dependency-version: 25.2.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: org.graalvm.truffle:truffle-runtime
  dependency-version: 25.2.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: org.graalvm.truffle:truffle-api
  dependency-version: 25.2.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: org.graalvm.python:python-language
  dependency-version: 25.2.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: org.graalvm.python:python-resources
  dependency-version: 25.2.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: org.graalvm.truffle:truffle-runtime
  dependency-version: 25.2.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: org.graalvm.truffle:truffle-api
  dependency-version: 25.2.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: tools.jackson:jackson-bom
  dependency-version: 3.2.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: com.fasterxml.jackson:jackson-bom
  dependency-version: 2.22.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: ch.qos.logback:logback-classic
  dependency-version: 1.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: org.junit:junit-bom
  dependency-version: 6.1.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: org.apache.maven.plugins:maven-jar-plugin
  dependency-version: 3.5.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Aug 12, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants