Skip to content

Bump the maven group across 1 directory with 2 updates - #16

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/hazelcast-parent/maven-55c7a6c009
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/hazelcast-parent/maven-55c7a6c009

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 15, 2026

Copy link
Copy Markdown

Bumps the maven group with 2 updates in the /hazelcast-parent directory: com.rabbitmq:amqp-client and at.yawk.lz4:lz4-java.

Updates com.rabbitmq:amqp-client from 5.35.0 to 5.37.0

Release notes

Sourced from com.rabbitmq:amqp-client's releases.

5.37.0

Changes between 5.36.0 and 5.37.0

This is a maintenance release with a bug fix, a usability improvement, and dependency upgrades. It is compatible with 5.36.0. All users are encouraged to upgrade.

Harden (deprecated) JSON reader

GitHub PR: #2100

Set preferred TLS protocol to version 1.3

GitHub issue: #2098

Bump dependencies

GitHub issue: #2093

Dependency

Maven

<dependency>
  <groupId>com.rabbitmq</groupId>
  <artifactId>amqp-client</artifactId>
  <version>5.37.0</version>
</dependency>

Gradle

compile 'com.rabbitmq:amqp-client:5.37.0'

5.36.0

Changes between 5.35.0 and 5.36.0

This is a maintenance release with bug fixes and dependency upgrades. It is compatible with 5.35.0. All users are encouraged to upgrade.

Do not enable hostname verification in useTlsWithNoVerification

GitHub PR: #2081

Be more defensive when parsing shortstr values in tables

GitHub PR: #2065

Bump dependencies

... (truncated)

Commits
  • 0027775 [maven-release-plugin] prepare release v5.37.0
  • 0f40842 Set release version to 5.37.0
  • a93de83 Merge pull request #2107 from rabbitmq/dependabot/maven/v5.x/com.diffplug.spo...
  • a544309 Bump com.diffplug.spotless:spotless-maven-plugin from 3.10.2 to 3.10.3
  • b47f881 Merge pull request #2104 from rabbitmq/dependabot/maven/v5.x/org.mockito-mock...
  • 50b27c5 Bump org.mockito:mockito-core from 5.23.0 to 5.24.0
  • 2a374aa Merge pull request #2102 from rabbitmq/dependabot/maven/v5.x/com.fasterxml.ja...
  • 2d7a009 Bump com.fasterxml.jackson.core:jackson-databind from 2.22.2 to 2.22.3
  • a1f294a ci: use Erlang 28 alphas for 4.4
  • b5572cf ci: test on Ubuntu 26.04
  • Additional commits viewable in compare view

Updates at.yawk.lz4:lz4-java from 1.11.2 to 1.11.4

Release notes

Sourced from at.yawk.lz4:lz4-java's releases.

lz4-java v1.11.4

Security release for CVE-2026-106450, CVE-2026-106449 and CVE-2026-106451. Also includes general fixes for bugs found by AI.

What's Changed

Full Changelog: yawkat/lz4-java@v1.11.3...v1.11.4

lz4-java v1.11.3

Not a security release. This is the second attempt at this release due to a javadoc issue.

What's Changed

... (truncated)

Commits
  • 4af910b Remove duplicate testAvailableAfterEmptyBlock (#149)
  • 7a48b7f Merge commit from fork
  • c8ebf97 Merge commit from fork
  • 2acc0ec Merge commit from fork
  • e0178d2 Rework README, add contributing guide, Scorecard and coverage (#147)
  • 37ee3cc Delete .clinerules (#148)
  • 788980d Fix negative LZ4BlockInputStream.available() after an empty block (#129)
  • 5442f0e Test the darwin/aarch64 native library before publishing (#143)
  • 68d4bfc Only publish to Central from v* tags (#139)
  • 4c685a9 Declare explicit GITHUB_TOKEN permissions in workflows (#135)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps the maven group with 2 updates in the /hazelcast-parent directory: [com.rabbitmq:amqp-client](https://github.com/rabbitmq/rabbitmq-java-client) and [at.yawk.lz4:lz4-java](https://github.com/yawkat/lz4-java).


Updates `com.rabbitmq:amqp-client` from 5.35.0 to 5.37.0
- [Release notes](https://github.com/rabbitmq/rabbitmq-java-client/releases)
- [Commits](rabbitmq/rabbitmq-java-client@v5.35.0...v5.37.0)

Updates `at.yawk.lz4:lz4-java` from 1.11.2 to 1.11.4
- [Release notes](https://github.com/yawkat/lz4-java/releases)
- [Changelog](https://github.com/yawkat/lz4-java/blob/main/CHANGES.md)
- [Commits](yawkat/lz4-java@v1.11.2...v1.11.4)

---
updated-dependencies:
- dependency-name: com.rabbitmq:amqp-client
  dependency-version: 5.37.0
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: at.yawk.lz4:lz4-java
  dependency-version: 1.11.4
  dependency-type: direct:production
  dependency-group: maven
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from a team as a code owner October 15, 2026 04:17
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Oct 15, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants