Bump the dev-dependencies group with 7 updates by dependabot[bot] · Pull Request #82 · codeheadsystems/libraries

dependabot · 2026-06-29T16:34:38Z

Bumps the dev-dependencies group with 7 updates:

Package	From	To
gradle-wrapper	`9.6.0`	`9.6.1`
software.amazon.awssdk:bom	`2.46.15`	`2.46.17`
com.google.dagger:dagger	`2.59.2`	`2.60`
com.google.dagger:dagger-compiler	`2.59.2`	`2.60`
org.junit.jupiter:junit-jupiter	`6.1.0`	`6.1.1`
ch.qos.logback:logback-classic	`1.5.34`	`1.5.37`
ch.qos.logback:logback-core	`1.5.34`	`1.5.37`

Updates gradle-wrapper from 9.6.0 to 9.6.1

Release notes

Sourced from gradle-wrapper's releases.

9.6.1

The Gradle team is excited to announce Gradle 9.6.1.

Here are the highlights of this release:

Improved Configuration Cache hit rates

Additional CLI rendering options

Important project hierarchy lookup deprecations

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle: Aharnish Solanki, Benedikt Johannes, Devendra Reddy Pennabadi, Dmytro Rodionov, Dreeam, Elías Hernández Rodríguez, Eng Zer Jun, FinlayRJW, Kamal Kansal, Marcono1234, Nelson Osacky, Philip Wedemann, Ravi, Roberto Perez Alcolea, Ryan Schmitt, Sebastian Schuberth, seunghun.ham, sk-reddy17, Suvrat Acharya, Vedant Madane.

Upgrade instructions

Switch your build to use Gradle 9.6.1 by updating your wrapper:
./gradlew :wrapper --gradle-version=9.6.1 && ./gradlew :wrapper
See the Gradle 9.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines. If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

Commits

309d128 Update fixed issues in release notes for 9.6.1 (#38328)
040a978 Update fixed issues in release notes for 9.6.1
e0b8325 Restore --non-interactive flag instead of --interactive/--no-interactive (#38...
946f3e6 Limit explicit temp file permission setting to intended use case (#38300)
65f8224 Restore --non-interactive flag instead of --interactive/--no-interactive
e346a5e Adjust CLI flag to configure non-interactive console (#38301)
9b53be9 Adjust CLI flag to configure non-interactive console
0dd3b53 Limit explicit temp file permission setting to intended use case
48e5ac2 Add reproducers
25598fd Prepare 9.6.1 patch release (#38293)
Additional commits viewable in compare view

Updates software.amazon.awssdk:bom from 2.46.15 to 2.46.17

Updates com.google.dagger:dagger from 2.59.2 to 2.60

Release notes

Sourced from com.google.dagger:dagger's releases.

Dagger 2.60

New features:

Fixes #5165: Support nullable type annotations when using the flag -Adagger.nullableTypeAnnotations=enabled. For more details see https://dagger.dev/dev-guide/compiler-options#nullable-type-annotations. (4bedb4b64)

Fixes #5087: When using the Hilt Gradle plugin, you can now disable fastInit mode from the command line, e.g. -Pdagger.hilt.fastInit=false. For more details see https://dagger.dev/hilt/flags#fast-init. (0f7642ba1)

Introduced parameterless @Binds methods to explicitly bind @Inject constructors. For more details see https://dagger.dev/dev-guide/#parameterless-binds. (4c81e9416)

Potential breaking changes:

When using the Hilt Gradle plugin, an error is now reported if a user sets a plugin-controlled flag (previously the plugin just ignored the user’s input). (a119ba68c)

Multidex support is removed. minSDK for Hilt is now 23, matching AndroidX (https://issuetracker.google.com/380448311) (1990bd1c4)

Bug fixes:

Fixes #1290: Enabled Guava BetaApi checks (5b8b2bdbe)

Fixes #5190, #5180, #5177: Updated Kotlin version ton 2.3.21 (7daaec5a9)

Fixes #5160: Deferred ViewModelMetadata processing on error types or missing @AssistedFactory (59827c699)

Fixes missing originating element attachments in a few Hilt processors to ensure correct incremental compilation tracking. (2930ca837)

Fixes Dagger multibinding duplicate masking across Map components (compile-time validation) Adds strict compile-time detection for duplicate map multibinding keys across component boundaries. This is enabled via the -Adagger.mapMultibindingDuplicateDetectionFix=ENABLED. This option is DISABLED by default to maintain backward compatibility. See Compiler Options for more details. (504397ebe)

Commits

d9ccdc7 2.60 release
7451e37 Add dependenciesRequested to ProducerMonitor
e820a70 Refactor: Inline library sources directly within MembersInjectionValidationTest
4bedb4b Support nullable type annotations with a flag.
445e6f0 Fix wording on ProducerMonitor methodStarting and ready javadocs
5b8b2bd Enable Guava BetaApi checks in Dagger's Bazel build.
639cd2b Temporarily disable a few KSP tests before updating XProcessing artifacts.
5988296 Handle RuntimeExceptions in DaggerSuperficialValidation getMessage / trac...
2227e70 Remove unused ProcessorErrors methods.
7daaec5 Update Kotlin and KSP versions to 2.3.
Additional commits viewable in compare view

Updates com.google.dagger:dagger-compiler from 2.59.2 to 2.60

Release notes

Sourced from com.google.dagger:dagger-compiler's releases.

Dagger 2.60

New features:

Fixes #5165: Support nullable type annotations when using the flag -Adagger.nullableTypeAnnotations=enabled. For more details see https://dagger.dev/dev-guide/compiler-options#nullable-type-annotations. (4bedb4b64)

Fixes #5087: When using the Hilt Gradle plugin, you can now disable fastInit mode from the command line, e.g. -Pdagger.hilt.fastInit=false. For more details see https://dagger.dev/hilt/flags#fast-init. (0f7642ba1)

Introduced parameterless @Binds methods to explicitly bind @Inject constructors. For more details see https://dagger.dev/dev-guide/#parameterless-binds. (4c81e9416)

Potential breaking changes:

When using the Hilt Gradle plugin, an error is now reported if a user sets a plugin-controlled flag (previously the plugin just ignored the user’s input). (a119ba68c)

Multidex support is removed. minSDK for Hilt is now 23, matching AndroidX (https://issuetracker.google.com/380448311) (1990bd1c4)

Bug fixes:

Fixes #1290: Enabled Guava BetaApi checks (5b8b2bdbe)

Fixes #5190, #5180, #5177: Updated Kotlin version ton 2.3.21 (7daaec5a9)

Fixes #5160: Deferred ViewModelMetadata processing on error types or missing @AssistedFactory (59827c699)

Fixes missing originating element attachments in a few Hilt processors to ensure correct incremental compilation tracking. (2930ca837)

Fixes Dagger multibinding duplicate masking across Map components (compile-time validation) Adds strict compile-time detection for duplicate map multibinding keys across component boundaries. This is enabled via the -Adagger.mapMultibindingDuplicateDetectionFix=ENABLED. This option is DISABLED by default to maintain backward compatibility. See Compiler Options for more details. (504397ebe)

Commits

d9ccdc7 2.60 release
7451e37 Add dependenciesRequested to ProducerMonitor
e820a70 Refactor: Inline library sources directly within MembersInjectionValidationTest
4bedb4b Support nullable type annotations with a flag.
445e6f0 Fix wording on ProducerMonitor methodStarting and ready javadocs
5b8b2bd Enable Guava BetaApi checks in Dagger's Bazel build.
639cd2b Temporarily disable a few KSP tests before updating XProcessing artifacts.
5988296 Handle RuntimeExceptions in DaggerSuperficialValidation getMessage / trac...
2227e70 Remove unused ProcessorErrors methods.
7daaec5 Update Kotlin and KSP versions to 2.3.
Additional commits viewable in compare view

Updates com.google.dagger:dagger-compiler from 2.59.2 to 2.60

Release notes

Sourced from com.google.dagger:dagger-compiler's releases.

Dagger 2.60

New features:

Fixes #5165: Support nullable type annotations when using the flag -Adagger.nullableTypeAnnotations=enabled. For more details see https://dagger.dev/dev-guide/compiler-options#nullable-type-annotations. (4bedb4b64)

Fixes #5087: When using the Hilt Gradle plugin, you can now disable fastInit mode from the command line, e.g. -Pdagger.hilt.fastInit=false. For more details see https://dagger.dev/hilt/flags#fast-init. (0f7642ba1)

Introduced parameterless @Binds methods to explicitly bind @Inject constructors. For more details see https://dagger.dev/dev-guide/#parameterless-binds. (4c81e9416)

Potential breaking changes:

When using the Hilt Gradle plugin, an error is now reported if a user sets a plugin-controlled flag (previously the plugin just ignored the user’s input). (a119ba68c)

Multidex support is removed. minSDK for Hilt is now 23, matching AndroidX (https://issuetracker.google.com/380448311) (1990bd1c4)

Bug fixes:

Fixes #1290: Enabled Guava BetaApi checks (5b8b2bdbe)

Fixes #5190, #5180, #5177: Updated Kotlin version ton 2.3.21 (7daaec5a9)

Fixes #5160: Deferred ViewModelMetadata processing on error types or missing @AssistedFactory (59827c699)

Fixes missing originating element attachments in a few Hilt processors to ensure correct incremental compilation tracking. (2930ca837)

Fixes Dagger multibinding duplicate masking across Map components (compile-time validation) Adds strict compile-time detection for duplicate map multibinding keys across component boundaries. This is enabled via the -Adagger.mapMultibindingDuplicateDetectionFix=ENABLED. This option is DISABLED by default to maintain backward compatibility. See Compiler Options for more details. (504397ebe)

Commits

d9ccdc7 2.60 release
7451e37 Add dependenciesRequested to ProducerMonitor
e820a70 Refactor: Inline library sources directly within MembersInjectionValidationTest
4bedb4b Support nullable type annotations with a flag.
445e6f0 Fix wording on ProducerMonitor methodStarting and ready javadocs
5b8b2bd Enable Guava BetaApi checks in Dagger's Bazel build.
639cd2b Temporarily disable a few KSP tests before updating XProcessing artifacts.
5988296 Handle RuntimeExceptions in DaggerSuperficialValidation getMessage / trac...
2227e70 Remove unused ProcessorErrors methods.
7daaec5 Update Kotlin and KSP versions to 2.3.
Additional commits viewable in compare view

Updates org.junit.jupiter:junit-jupiter from 6.1.0 to 6.1.1

Release notes

Sourced from org.junit.jupiter:junit-jupiter's releases.

JUnit 6.1.1 = Platform 6.1.1 + Jupiter 6.1.1 + Vintage 6.1.1

See Release Notes.

Full Changelog: junit-team/junit-framework@r6.1.0...r6.1.1

Commits

0d85889 Release 6.1.1
0363eee Finalize 6.1.1 release notes
a6d540a Move entry to 6.1.1 release notes
69339d5 Only pass timeout when publishing to avoid failure in nmcp plugin
dec2eb9 Allow excluding engines from memory cleanup mode (#5786)
a5f4270 Publish sha256/sha512 checksums again but filter out signature ones (#5796)
8213012 Update plugin nmcp-settings to v1.6.0 (#5787)
d1bf847 Generate Javadoc for aggregator modules
d721de5 Pass --no-fonts to javadoc convention
d289ec6 Restore original SetSystemProperty values in a ParameterizedTest (#5720)
Additional commits viewable in compare view

Updates ch.qos.logback:logback-classic from 1.5.34 to 1.5.37

Release notes

Sourced from ch.qos.logback:logback-classic's releases.

Logback 1.5.37

2026-06-26 Release of logback version 1.5.37

• Given the numerous vulnerabilities related to conditional configuration processing based on the evaluation of Java expressions using the Janino library, support for such expressions has been removed. Users are offered the an online migration service or the element introduced in version 1.5.20. See the relevant documentation for more details.

• A bitwise identical binary of this version can be reproduced by building from source code at commit c1df7f522e648eec7b4ef6a12c8758fec0f00048 associated with the tag v_1.5.37. Release built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Logback 1.5.36

2026-06-25 Release of logback version 1.5.36

• The 'condition' attribute in <if> elements now reject certain references that are associated with ACE attacks. This issue was reported by "yulate" (yulate531@gmail.com.com) and registered as CVE-2026-13006.

• A bitwise identical binary of this version can be reproduced by building from source code at commit 9b94c37562bf25a6a944146701d42ee6c4eee888 associated with the tag v_1.5.36. Release built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Logback 1.5.35

026-06-23 Release of logback version 1.5.35

• The 'condition' attribute in <if> elements now rejects unicode escape sequences (\u and \U). This closes a bypass of the existing prohibition on the new operator in Janino-evaluated conditions. This issue was reported by IcySun (icysun@qq.com) and registered as CVE-2026-13006.

• Added ConfiguratorRank.AUTHENTICATING (rank 100), the highest configurator rank, for certified/authenticating configurators discovered via the ServiceLoader mechanism. ContextInitializer now requires that at most one such configurator exist on the classpath; if more than one is found, initialization aborts with an error.

• ConsoleCharsetPropertyDefiner is no longer shipped. The Java 21 multi-release compilation of logback-core has been disabled, which removes this class from the published artifact. Configurations that referenced ch.qos.logback.core.property.ConsoleCharsetPropertyDefiner will need an alternative approach for console charset detection.

• The logback-examples module is now included in artifacts published to Maven Central.

• JoranConfigurator.makeAnotherInstance() and DefaultJoranConfigurator.performMultiStepConfigurationFileSearch() are now protected, allowing derived configurators to override these methods.

• A bitwise identical binary of this version can be reproduced by building from source code at commit 08bd1598d565d83444f72983935e7da4746783b7 associated with the tag v_1.5.35. Release built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Commits

c1df7f5 prepare release 1.5.37
a189967 remove conditional based on janino
aaa9052 start work on 1.5.37-SNAPSHOT
9b94c37 prepare release 1.5.36
e6a8280 prevent attacks using disallowed references
24c4b63 start work on 1.5.36-SNAPSHOT
08bd159 preapre release 1.5.35
37d256b indentation changes only
d3d7307 minor comment
fa0411a radomize file location
Additional commits viewable in compare view

Updates ch.qos.logback:logback-core from 1.5.34 to 1.5.37

Release notes

Sourced from ch.qos.logback:logback-core's releases.

Logback 1.5.37

2026-06-26 Release of logback version 1.5.37

• Given the numerous vulnerabilities related to conditional configuration processing based on the evaluation of Java expressions using the Janino library, support for such expressions has been removed. Users are offered the an online migration service or the element introduced in version 1.5.20. See the relevant documentation for more details.

• A bitwise identical binary of this version can be reproduced by building from source code at commit c1df7f522e648eec7b4ef6a12c8758fec0f00048 associated with the tag v_1.5.37. Release built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Logback 1.5.36

2026-06-25 Release of logback version 1.5.36

• The 'condition' attribute in <if> elements now reject certain references that are associated with ACE attacks. This issue was reported by "yulate" (yulate531@gmail.com.com) and registered as CVE-2026-13006.

• A bitwise identical binary of this version can be reproduced by building from source code at commit 9b94c37562bf25a6a944146701d42ee6c4eee888 associated with the tag v_1.5.36. Release built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Logback 1.5.35

026-06-23 Release of logback version 1.5.35

• The 'condition' attribute in <if> elements now rejects unicode escape sequences (\u and \U). This closes a bypass of the existing prohibition on the new operator in Janino-evaluated conditions. This issue was reported by IcySun (icysun@qq.com) and registered as CVE-2026-13006.

• Added ConfiguratorRank.AUTHENTICATING (rank 100), the highest configurator rank, for certified/authenticating configurators discovered via the ServiceLoader mechanism. ContextInitializer now requires that at most one such configurator exist on the classpath; if more than one is found, initialization aborts with an error.

• ConsoleCharsetPropertyDefiner is no longer shipped. The Java 21 multi-release compilation of logback-core has been disabled, which removes this class from the published artifact. Configurations that referenced ch.qos.logback.core.property.ConsoleCharsetPropertyDefiner will need an alternative approach for console charset detection.

• The logback-examples module is now included in artifacts published to Maven Central.

• JoranConfigurator.makeAnotherInstance() and DefaultJoranConfigurator.performMultiStepConfigurationFileSearch() are now protected, allowing derived configurators to override these methods.

• A bitwise identical binary of this version can be reproduced by building from source code at commit 08bd1598d565d83444f72983935e7da4746783b7 associated with the tag v_1.5.35. Release built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Commits

c1df7f5 prepare release 1.5.37
a189967 remove conditional based on janino
aaa9052 start work on 1.5.37-SNAPSHOT
9b94c37 prepare release 1.5.36
e6a8280 prevent attacks using disallowed references
24c4b63 start work on 1.5.36-SNAPSHOT
08bd159 preapre release 1.5.35
37d256b indentation changes only
d3d7307 minor comment
fa0411a radomize file location
Additional commits viewable in compare view

Updates ch.qos.logback:logback-core from 1.5.34 to 1.5.37

Release notes

Sourced from ch.qos.logback:logback-core's releases.

Logback 1.5.37

2026-06-26 Release of logback version 1.5.37

• Given the numerous vulnerabilities related to conditional configuration processing based on the evaluation of Java expressions using the Janino library, support for such expressions has been removed. Users are offered the an online migration service or the element introduced in version 1.5.20. See the relevant documentation for more details.

• A bitwise identical binary of this version can be reproduced by building from source code at commit c1df7f522e648eec7b4ef6a12c8758fec0f00048 associated with the tag v_1.5.37. Release built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Logback 1.5.36

2026-06-25 Release of logback version 1.5.36

• The 'condition' attribute in <if> elements now reject certain references that are associated with ACE attacks. This issue was reported by "yulate" (yulate531@gmail.com.com) and registered as CVE-2026-13006.

• A bitwise identical binary of this version can be reproduced by building from source code at commit 9b94c37562bf25a6a944146701d42ee6c4eee888 associated with the tag v_1.5.36. Release built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Logback 1.5.35

026-06-23 Release of logback version 1.5.35

• The 'condition' attribute in <if> elements now rejects unicode escape sequences (\u and \U). This closes a bypass of the existing prohibition on the new operator in Janino-evaluated conditions. This issue was reported by IcySun (icysun@qq.com) and registered as CVE-2026-13006.

• Added ConfiguratorRank.AUTHENTICATING (rank 100), the highest configurator rank, for certified/authenticating configurators discovered via the ServiceLoader mechanism. ContextInitializer now requires that at most one such configurator exist on the classpath; if more than one is found, initialization aborts with an error.

• ConsoleCharsetPropertyDefiner is no longer shipped. The Java 21 multi-release compilation of logback-core has been disabled, which removes this class from the published artifact. Configurations that referenced ch.qos.logback.core.property.ConsoleCharsetPropertyDefiner will need an alternative approach for console charset detection.

• The logback-examples module is now included in artifacts published to Maven Central.

• JoranConfigurator.makeAnotherInstance() and DefaultJoranConfigurator.performMultiStepConfigurationFileSearch() are now protected, allowing derived configurators to override these methods.

• A bitwise identical binary of this version can be reproduced by building from source code at commit 08bd1598d565d83444f72983935e7da4746783b7 associated with the tag v_1.5.35. Release built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Commits

c1df7f5 prepare release 1.5.37
a189967 remove conditional based on janino
aaa9052 start work on 1.5.37-SNAPSHOT
9b94c37 prepare release 1.5.36
e6a8280 prevent attacks using disallowed references
24c4b63 start work on 1.5.36-SNAPSHOT
08bd159 preapre release 1.5.35
37d256b indentation changes only
d3d7307 minor comment
fa0411a radomize file location
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dev-dependencies group with 7 updates: | Package | From | To | | --- | --- | --- | | [gradle-wrapper](https://github.com/gradle/gradle) | `9.6.0` | `9.6.1` | | software.amazon.awssdk:bom | `2.46.15` | `2.46.17` | | [com.google.dagger:dagger](https://github.com/google/dagger) | `2.59.2` | `2.60` | | [com.google.dagger:dagger-compiler](https://github.com/google/dagger) | `2.59.2` | `2.60` | | [org.junit.jupiter:junit-jupiter](https://github.com/junit-team/junit-framework) | `6.1.0` | `6.1.1` | | [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) | `1.5.34` | `1.5.37` | | [ch.qos.logback:logback-core](https://github.com/qos-ch/logback) | `1.5.34` | `1.5.37` | Updates `gradle-wrapper` from 9.6.0 to 9.6.1 - [Release notes](https://github.com/gradle/gradle/releases) - [Commits](gradle/gradle@v9.6.0...v9.6.1) Updates `software.amazon.awssdk:bom` from 2.46.15 to 2.46.17 Updates `com.google.dagger:dagger` from 2.59.2 to 2.60 - [Release notes](https://github.com/google/dagger/releases) - [Changelog](https://github.com/google/dagger/blob/master/CHANGELOG.md) - [Commits](google/dagger@dagger-2.59.2...dagger-2.60) Updates `com.google.dagger:dagger-compiler` from 2.59.2 to 2.60 - [Release notes](https://github.com/google/dagger/releases) - [Changelog](https://github.com/google/dagger/blob/master/CHANGELOG.md) - [Commits](google/dagger@dagger-2.59.2...dagger-2.60) Updates `com.google.dagger:dagger-compiler` from 2.59.2 to 2.60 - [Release notes](https://github.com/google/dagger/releases) - [Changelog](https://github.com/google/dagger/blob/master/CHANGELOG.md) - [Commits](google/dagger@dagger-2.59.2...dagger-2.60) Updates `org.junit.jupiter:junit-jupiter` from 6.1.0 to 6.1.1 - [Release notes](https://github.com/junit-team/junit-framework/releases) - [Commits](junit-team/junit-framework@r6.1.0...r6.1.1) Updates `ch.qos.logback:logback-classic` from 1.5.34 to 1.5.37 - [Release notes](https://github.com/qos-ch/logback/releases) - [Commits](qos-ch/logback@v_1.5.34...v_1.5.37) Updates `ch.qos.logback:logback-core` from 1.5.34 to 1.5.37 - [Release notes](https://github.com/qos-ch/logback/releases) - [Commits](qos-ch/logback@v_1.5.34...v_1.5.37) Updates `ch.qos.logback:logback-core` from 1.5.34 to 1.5.37 - [Release notes](https://github.com/qos-ch/logback/releases) - [Commits](qos-ch/logback@v_1.5.34...v_1.5.37) --- updated-dependencies: - dependency-name: gradle-wrapper dependency-version: 9.6.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: software.amazon.awssdk:bom dependency-version: 2.46.17 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: com.google.dagger:dagger dependency-version: '2.60' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: com.google.dagger:dagger-compiler dependency-version: '2.60' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: com.google.dagger:dagger-compiler dependency-version: '2.60' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: org.junit.jupiter:junit-jupiter dependency-version: 6.1.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: ch.qos.logback:logback-classic dependency-version: 1.5.37 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: ch.qos.logback:logback-core dependency-version: 1.5.37 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: ch.qos.logback:logback-core dependency-version: 1.5.37 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dev-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Jun 29, 2026

github-actions Bot merged commit e1882cf into main Jun 29, 2026
4 checks passed

github-actions Bot approved these changes Jun 29, 2026

View reviewed changes

dependabot Bot deleted the dependabot/gradle/dev-dependencies-74f97c93d8 branch June 29, 2026 16:34

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the dev-dependencies group with 7 updates#82

Bump the dev-dependencies group with 7 updates#82
github-actions[bot] merged 1 commit into
mainfrom
dependabot/gradle/dev-dependencies-74f97c93d8

dependabot Bot commented on behalf of github Jun 29, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jun 29, 2026

9.6.1

Upgrade instructions

Reporting problems

Dagger 2.60

New features:

Potential breaking changes:

Bug fixes:

Dagger 2.60

New features:

Potential breaking changes:

Bug fixes:

Dagger 2.60

New features:

Potential breaking changes:

Bug fixes:

Logback 1.5.37

Logback 1.5.36

Logback 1.5.35

Logback 1.5.37

Logback 1.5.36

Logback 1.5.35

Logback 1.5.37

Logback 1.5.36

Logback 1.5.35

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants