Skip to content

Bump the gradle-dependencies group across 1 directory with 5 updates - #223

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/gradle/gradle-dependencies-a15830d693
Closed

Bump the gradle-dependencies group across 1 directory with 5 updates#223
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/gradle/gradle-dependencies-a15830d693

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 5, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the gradle-dependencies group with 5 updates in the / directory:

Package From To
commons-io:commons-io 2.21.0 2.22.0
org.junit.jupiter:junit-jupiter 5.14.3 5.14.4
com.networknt:json-schema-validator 1.5.9 2.0.3
com.google.code.gson:gson 2.13.2 2.14.0
com.gradle.plugin-publish 2.1.0 2.1.1

Updates commons-io:commons-io from 2.21.0 to 2.22.0

Updates org.junit.jupiter:junit-jupiter from 5.14.3 to 5.14.4

Release notes

Sourced from org.junit.jupiter:junit-jupiter's releases.

JUnit 5.14.4 = Platform 1.14.4 + Jupiter 5.14.4 + Vintage 5.14.4

See Release Notes.

Full Changelog: junit-team/junit-framework@r5.14.3...r5.14.4

Commits
  • 096fd69 Release 5.14.4
  • 11fd02b Remove JDK 24 (EOL)
  • 5b7f023 Fix integration tests on JDK 27
  • 18f842a Test against JDK 26 (GA) and JDK 27 (EA)
  • a5bf336 Polish 5.14.4 release notes
  • 7667c14 Fix race condition in NodeTestTask (#5427)
  • ac01f2d Include full display name in legacy XML reports (#5524)
  • fbd4a8e Include class template invocation index in legacy reporting names
  • 7d6f0c0 Only check PDF for GA releases
  • 14f534d Test 5.14.x against JDK 25 ga (#5623)
  • Additional commits viewable in compare view

Updates com.networknt:json-schema-validator from 1.5.9 to 2.0.3

Release notes

Sourced from com.networknt:json-schema-validator's releases.

2.0.3- 2026-06-23

Added

Changed

  • release with JDK 11
  • fixes 2.0.2 published jar is missing module-info.class — JPMS module com.networknt.schema no longer resolves

2.0.2- 2026-06-21

Added

Changed

  • fixes #1248 validating draft4 schemas (#1249)

  • fixes #1248 validating draft4 schemas

  • Address regex factory review comments

  • Rename regex specification version variable

  • fixes #1174 TextNodes as schema seem to validate any value (#1250)

  • fixes #1174 TextNodes as schema seem to validate any value

  • Address loaded schema validation for issue 1174

  • Address schema node validation review comments

  • Preserve mapped schema override path

  • Validate referenced document fragment schemas

  • Remove duplicate schema type validation

  • Validate loaded schemas for anchor refs

  • fixes #1252 problem with additionalProperties schema in jsconfig schema (#1253)

  • Add method to SpecificationVersion to determine from schema node (#1221)

  • Manual adjustments for Jackson 2 compatibility and CVE fix

2.0.1- 2025-12-11

Added

Changed

... (truncated)

Changelog

Sourced from com.networknt:json-schema-validator's changelog.

Change Log

All notable changes to this project will be documented in this file.

This format is based on Keep a Changelog.

This project does not adhere to Semantic Versioning and minor version changes can have incompatible API changes. These incompatible API changes will largely affect those who have custom validator or walker implementations. Those who just use the library to validate using the standard JSON Schema Draft specifications may not need changes.

[Unreleased]

Added

Changed

Changed

3.0.5- 2026-06-21

Added

Changed

  • fixes #1252 problem with additionalProperties schema in jsconfig schema (#1253)
  • fixes #1174 TextNodes as schema seem to validate any value (#1250)

3.0.4- 2026-06-10

Added

Changed

3.0.3- 2026-05-27

Added

Changed

3.0.2- 2026-04-14

Added

Changed

3.0.1- 2026-03-10

... (truncated)

Commits

Updates com.google.code.gson:gson from 2.13.2 to 2.14.0

Release notes

Sourced from com.google.code.gson:gson's releases.

Gson 2.14.0

What's Changed

  • Add type adapters for java.time classes by @​eamonnmcmanus in google/gson#2948

    When the java.time API is available, Gson automatically can read and write instances of classes like Instant and Duration. The format it uses essentially freezes the JSON representation that ReflectiveTypeAdapterFactory established by default, based on the private fields of java.time classes. That's not a great representation, but it is understandable. Changing it to anything else would break compatibility with systems that are expecting the current format.

    With this change, Gson no longer tries to access private fields of these classes using reflection. So it is no longer necessary to run with --add-opens for these classes on recent JDKs.

  • Remove com.google.gson.graph by @​eamonnmcmanus in google/gson#2990.

    This package was not part of any released artifact and depended on Gson internals in potentially problematic ways.

  • Validate that strings being parsed as integers consist of ASCII characters by @​eamonnmcmanus in google/gson#2995

    Previously, strings could contain non-ASCII Unicode digits and still be parsed as integers. That's inconsistent with how JSON numbers are treated.

  • Fix duplicate key detection when first value is null by @​andrewstellman in google/gson#3006

    This could potentially break code that was relying on the incorrect behaviour. For example, this JSON string was previously accepted but will no longer be: {"foo": null, "foo": bar}.

  • Remove Serializable from internal Type implementation classes. by @​eamonnmcmanus in google/gson#3011

    The nested classes ParameterizedTypeImpl, GenericArrayTypeImpl, and WildcardTypeImpl in GsonTypes are implementations of the corresponding types (without Impl) in java.lang.reflect. For some reason, they were serializable, even though the java.lang.reflect implementations are not. Having unnecessarily serializable classes could conceivably have been a security problem if they were part of a larger exploit using serialization. (We do not consider this a likely scenario and do not suggest that you need to update Gson just to get this change.)

  • Add LegacyProtoTypeAdapterFactory. by @​eamonnmcmanus in google/gson#3014

    This is not part of any released artifact, but may be of use when trying to fix code that is currently accessing the internals of protobuf classes via reflection.

  • Make AppendableWriter do flush and close if delegation object supports by @​MukjepScarlet in google/gson#2925

Other less visible changes

New Contributors

Full Changelog: google/gson@gson-parent-2.13.2...gson-parent-2.14.0

Commits
  • 3ff35d6 [maven-release-plugin] prepare release gson-parent-2.14.0
  • a3024fd Bump the maven group with 13 updates (#3002)
  • 5689ffe Bump the github-actions group across 1 directory with 3 updates (#3018)
  • 48db33c Add LegacyProtoTypeAdapterFactory. (#3014)
  • 53d703e Update outdated comment regarding serializable types (#3012)
  • 0189b72 Remove Serializable from internal Type implementation classes. (#3011)
  • f4d371d Fix duplicate key detection when first value is null (#3006)
  • 27d9ba1 Fix typo in README (JPMS dependencies section) (#3005)
  • 1fa9b7a Validate that strings being parsed as integers consist of ASCII characters (#...
  • b7d5954 Add iterator fail-fast tests for LinkedTreeMap.clear() (#2992)
  • Additional commits viewable in compare view

Updates com.gradle.plugin-publish from 2.1.0 to 2.1.1

Most Recent Ignore Conditions Applied to This Pull Request
Dependency Name Ignore Conditions
org.junit.jupiter:junit-jupiter [>= 6.a, < 7]
com.networknt:json-schema-validator [>= 3.a, < 4]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the gradle-dependencies group across 1 directory with 5 updates
275f31d 
Bumps the gradle-dependencies group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| commons-io:commons-io | `2.21.0` | `2.22.0` |
| [org.junit.jupiter:junit-jupiter](https://github.com/junit-team/junit-framework) | `5.14.3` | `5.14.4` |
| [com.networknt:json-schema-validator](https://github.com/networknt/json-schema-validator) | `1.5.9` | `2.0.3` |
| [com.google.code.gson:gson](https://github.com/google/gson) | `2.13.2` | `2.14.0` |
| com.gradle.plugin-publish | `2.1.0` | `2.1.1` |



Updates `commons-io:commons-io` from 2.21.0 to 2.22.0

Updates `org.junit.jupiter:junit-jupiter` from 5.14.3 to 5.14.4
- [Release notes](https://github.com/junit-team/junit-framework/releases)
- [Commits](junit-team/junit-framework@r5.14.3...r5.14.4)

Updates `com.networknt:json-schema-validator` from 1.5.9 to 2.0.3
- [Release notes](https://github.com/networknt/json-schema-validator/releases)
- [Changelog](https://github.com/networknt/json-schema-validator/blob/master/CHANGELOG.md)
- [Commits](networknt/json-schema-validator@1.5.9...2.0.3)

Updates `com.google.code.gson:gson` from 2.13.2 to 2.14.0
- [Release notes](https://github.com/google/gson/releases)
- [Changelog](https://github.com/google/gson/blob/main/CHANGELOG.md)
- [Commits](google/gson@gson-parent-2.13.2...gson-parent-2.14.0)

Updates `com.gradle.plugin-publish` from 2.1.0 to 2.1.1

---
updated-dependencies:
- dependency-name: commons-io:commons-io
  dependency-version: 2.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-dependencies
- dependency-name: org.junit.jupiter:junit-jupiter
  dependency-version: 5.14.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gradle-dependencies
- dependency-name: com.networknt:json-schema-validator
  dependency-version: 2.0.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gradle-dependencies
- dependency-name: com.google.code.gson:gson
  dependency-version: 2.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-dependencies
- dependency-name: com.gradle.plugin-publish
  dependency-version: 2.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gradle-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Jul 5, 2026
@bigdaz bigdaz mentioned this pull request Jul 5, 2026
Merged
bigdaz added a commit that referenced this pull request Jul 5, 2026
@bigdaz @claude
Update json-schema-validator to 2.0.3 and migrate to its new API (#224)
bd5f2ba 
## What

Bumps `com.networknt:json-schema-validator` **1.5.9 → 2.0.3** and
migrates the test schema-validation helper (`BaseExtractorTest`) to the
new 2.x API.

This unblocks the Dependabot group update in #223, whose
`json-schema-validator` bump was failing to compile (`unable to resolve
class JsonSchema` and friends). The other four dependencies in that
group are unrelated and can be handled by Dependabot as usual.

## Why the source changes are needed

json-schema-validator 2.x is a breaking release that renames the core
types out of the old `com.networknt.schema.*` surface:

| 1.5.9 | 2.0.3 |
| --- | --- |
| `JsonSchema` | `Schema` |
| `JsonSchemaFactory` | `SchemaRegistry` |
| `ValidationMessage` | `Error` |
| `JsonSchemaException` | `SchemaException` |
| `SpecVersion.VersionFlag.V4` | `SpecificationVersion.DRAFT_4` |
| `JsonSchemaFactory.builder(getInstance(...)).build()` |
`SchemaRegistry.withDefaultDialect(...)` |
| `schema.validate()` → `Set<ValidationMessage>` | `schema.validate()` →
`List<Error>` |

Imports are now explicit rather than a wildcard, so that the new
`com.networknt.schema.Error` correctly shadows `java.lang.Error`.

## Why 2.0.3 and not 3.x

The 3.x line requires Jackson 3; this project is on Jackson 2.
Dependabot's config already ignores json-schema-validator major v3, so
2.0.3 is the correct Jackson-2-compatible target.

## Verification

- `:plugin-test:test` (full integration suite, which exercises the
schema validation path) ✅

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
@bigdaz

bigdaz commented Jul 5, 2026

Copy link
Copy Markdown
Member

@dependabot rebase

@dependabot @github

dependabot Bot commented on behalf of github Jul 5, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Jul 5, 2026
@dependabot
dependabot Bot deleted the dependabot/gradle/gradle-dependencies-a15830d693 branch July 5, 2026 01:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@bigdaz