Skip to content

build(deps): bump cn.hutool:hutool-core from 5.8.46 to 5.8.47 - #11

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/cn.hutool-hutool-core-5.8.47
Open

build(deps): bump cn.hutool:hutool-core from 5.8.46 to 5.8.47#11
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/cn.hutool-hutool-core-5.8.47

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 4, 2026

Copy link
Copy Markdown

Bumps cn.hutool:hutool-core from 5.8.46 to 5.8.47.

Release notes

Sourced from cn.hutool:hutool-core's releases.

5.8.47(2026-07-06) 🐣新特性 【core 】 EnumConverter变更规则,当用户自定义方法返回null时,调用默认valueOf(pr#4258@Github) 【core 】 DateUtilparseISO8601增加检查范围(pr#4275@Github) 【core 】 Guard FileMagicNumber AAC/M4A/AMR matchers against short byte arrays(pr#4278@Github) 【crypto 】 Reject empty cipherKey in Vigenere with a clear exception(pr#4279@Github) 【core 】 Return null from CsvRow.get for a negative index(pr#4280@Github) 【crypto 】 Reject too-short salt in BCrypt.hashpw with IllegalArgumentException(pr#4282@Github) 【crypto 】 Validate md5HexTo16 input length to avoid StringIndexOutOfBoundsException(pr#4283@Github) 🐞Bug修复 【core 】 修复HexUtil.format奇数位数输出错误问题(issue#4263@Github) 【core 】 修复CamelCaseLinkedMap顺序错乱问题(issue#IJV845@Gitee) 【core 】 修复AntPathMatchersubstring问题(pr#4276@Github) 【poi 】 修复Excel03SaxReader读取xls时最后一行数据丢失问题(pr#1442@Gitee) 【core 】 修复根据新版外国人永久居留身份证(18位)身份编号获取户籍省份编码的问题(pr#4288@Github) 【core 】 修复Record反序列化时字段null导致报错问题(issue#4269@Github)

Changelog

Sourced from cn.hutool:hutool-core's changelog.

5.8.47(2026-07-06)

🐣新特性

  • 【core 】 EnumConverter变更规则,当用户自定义方法返回null时,调用默认valueOf(pr#4258@Github)
  • 【core 】 DateUtilparseISO8601增加检查范围(pr#4275@Github)
  • 【core 】 Guard FileMagicNumber AAC/M4A/AMR matchers against short byte arrays(pr#4278@Github)
  • 【crypto 】 Reject empty cipherKey in Vigenere with a clear exception(pr#4279@Github)
  • 【core 】 Return null from CsvRow.get for a negative index(pr#4280@Github)
  • 【crypto 】 Reject too-short salt in BCrypt.hashpw with IllegalArgumentException(pr#4282@Github)
  • 【crypto 】 Validate md5HexTo16 input length to avoid StringIndexOutOfBoundsException(pr#4283@Github)

🐞Bug修复

  • 【core 】 修复HexUtil.format奇数位数输出错误问题(issue#4263@Github)
  • 【core 】 修复CamelCaseLinkedMap顺序错乱问题(issue#IJV845@Gitee)
  • 【core 】 修复AntPathMatchersubstring问题(pr#4276@Github)
  • 【poi 】 修复Excel03SaxReader读取xls时最后一行数据丢失问题(pr#1442@Gitee)
  • 【core 】 修复根据新版外国人永久居留身份证(18位)身份编号获取户籍省份编码的问题(pr#4288@Github)
  • 【core 】 修复Record反序列化时字段null导致报错问题(issue#4269@Github)
Commits
  • 8870454 Prepare release
  • 853c29f 🚀release5.8.47
  • eaa0641 fix test
  • 90fae33 fix test
  • c57da4d 修复Record反序列化时字段null导致报错问题(issue#4269@Github)
  • 212c796 修复根据新版外国人永久居留身份证(18位)身份编号获取户籍省份编码的问题(pr#4288@Github)
  • faa08a8 Merge pull request #4288 from YamMangoTea/v5-dev
  • 8290d30 Merge pull request #4284 from vasiliy-mikhailov/fix-condition-unwrapquote-whi...
  • 71e7957 Validate md5HexTo16 input length to avoid StringIndexOutOfBoundsException
  • 6cbc8f8 Merge pull request #4283 from vasiliy-mikhailov/fix-md5hexto16-short-input
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [cn.hutool:hutool-core](https://github.com/chinabugotech/hutool) from 5.8.46 to 5.8.47.
- [Release notes](https://github.com/chinabugotech/hutool/releases)
- [Changelog](https://github.com/chinabugotech/hutool/blob/v5-master/CHANGELOG.md)
- [Commits](chinabugotech/hutool@v5.8.46...5.8.47)

---
updated-dependencies:
- dependency-name: cn.hutool:hutool-core
  dependency-version: 5.8.47
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Aug 4, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants