Skip to content

Bump the maven group across 2 directories with 13 updates - #7

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/maven/zeppelin-zengine/maven-861eecd672
Open

Bump the maven group across 2 directories with 13 updates#7
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/maven/zeppelin-zengine/maven-861eecd672

Conversation

@dependabot

@dependabotdependabotBot commented on behalf of githubAug 27, 2026

Copy link
Copy Markdown

Bumps the maven group with 12 updates in the /zeppelin-zengine directory:

PackageFromTo
org.apache.zeppelin:zeppelin-interpreter0.11.0-SNAPSHOT0.12.0
commons-io:commons-io2.72.14.0
io.micrometer:micrometer-core1.6.01.15.12
org.apache.commons:commons-vfs22.6.02.10.0
org.eclipse.jgit:org.eclipse.jgit4.5.4.201711221230-r5.13.4.202507202350-r
org.codehaus.jettison:jettison1.5.21.5.4
org.apache.commons:commons-lang33.12.03.18.0
org.apache.commons:commons-compress1.211.26.0
org.apache.hadoop:hadoop-common2.7.73.4.0
org.apache.thrift:libthrift0.13.00.23.0
org.apache.commons:commons-configuration22.8.02.15.0
org.apache.shiro:shiro-core1.9.12.2.1

Bumps the maven group with 7 updates in the /zeppelin-web directory:

PackageFromTo
commons-io:commons-io2.72.14.0
org.codehaus.jettison:jettison1.5.21.5.4
org.apache.commons:commons-lang33.12.03.18.0
org.apache.hadoop:hadoop-common2.7.73.4.0
org.apache.thrift:libthrift0.13.00.23.0
org.apache.commons:commons-configuration22.8.02.15.0
org.apache.shiro:shiro-core1.9.12.2.1

Updates org.apache.zeppelin:zeppelin-interpreter from 0.11.0-SNAPSHOT to 0.12.0

Updates commons-io:commons-io from 2.7 to 2.14.0

Updates io.micrometer:micrometer-core from 1.6.0 to 1.15.12

Release notes

Sourced from io.micrometer:micrometer-core's releases.

1.15.12

🐞 Bug Fixes

  • ArrayIndexOutOfBoundsException when using LongTaskTimer #3877
  • Jetty 12's TimedHandler marks some requests with outcome UNKNOWN #7276
  • MeterRegistry closes HighCardinalityTagsDetector twice if the registry is closed twice #7409
  • Reduce allocation in HTTP server instrumentation #7580
  • Reduce allocation in gRPC server convention #7581

📔 Documentation

  • Clarify time series produced by LongTaskTimer when using Prometheus #6507
  • Document metrics that need to close the MeterBinder #4624
  • Multigauge Documentation lacks overwrite=true #4403

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​izeye, @​jewoodev, @​codingkiddo, @​schiemon, @​blaspat

1.15.11

🐞 Bug Fixes

  • Invalid reflection hint in micrometer-core for native GraalVM 25 build #7316

🔨 Dependency Upgrades

  • Bump org.apache.maven:maven-resolver-provider from 3.9.13 to 3.9.14 #7280
  • Bump spring6 from 6.2.16 to 6.2.17 #7294

❤️ Contributors

@​Joowon-Seo and @​ribafish Thank you to all the contributors who worked on this release:

1.15.10

📔 Documentation

  • Document (Default)MeterObservationHandler #6361
  • Document statsd UDS config #5730

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​seonghyeoklee, @​kangdaeun1022, and @​izeye

1.15.9

🐞 Bug Fixes

... (truncated)

Commits
  • dc2e5e2 Reduce allocation in gRPC server convention
  • 36da131 Reduce allocation in HTTP server instrumentation
  • cf6ac02 Reduce flakiness of PushMeterRegistryTest (#7574)
  • 8c5d560 Bump io.netty:netty-bom from 4.1.134.Final to 4.1.135.Final (#7555)
  • 1af9de1 Document MeterBinders that need to be closed (#7549)
  • 4f12b9d docs: clarify MultiGauge row registration (#7548)
  • c5705a3 Polish Prometheus docs update
  • 6cdf633 docs: clarify Prometheus LongTaskTimer output (#7546)
  • 7899299 Capture actual response status in TimedHandler.onComplete() (#7378)
  • 4e5bcc4 Bump dropwizard-metrics from 4.2.38 to 4.2.39 (#7530)
  • Additional commits viewable in compare view

Updates org.apache.commons:commons-vfs2 from 2.6.0 to 2.10.0

Updates org.eclipse.jgit:org.eclipse.jgit from 4.5.4.201711221230-r to 5.13.4.202507202350-r

Updates org.codehaus.jettison:jettison from 1.5.2 to 1.5.4

Release notes

Sourced from org.codehaus.jettison:jettison's releases.

Jettison 1.5.4

What's Changed

Full Changelog: jettison-json/jettison@jettison-1.5.3...jettison-1.5.4

Jettison 1.5.3

Full Changelog: jettison-json/jettison@jettison-1.5.2...jettison-1.5.3

Commits
  • a77ffc4 [maven-release-plugin] prepare release jettison-1.5.4
  • c20a8be Fixing issue 60
  • 3e1a913 [maven-release-plugin] prepare for next development iteration
  • da6d8bc [maven-release-plugin] prepare release jettison-1.5.3
  • 9e3ec6f Remove commented out code
  • b3c4000 Adding another test for backslashes
  • 631c21e Try and fix backslash escaping. Throw syntax exception on invalid json sooner
  • d9da808 Introducing new static methods to set the recursion depth limit
  • 888eec8 Incorrect recursion depth check in JSONTokener
  • 677aba5 [maven-release-plugin] prepare for next development iteration
  • See full diff in compare view

Updates org.apache.commons:commons-lang3 from 3.12.0 to 3.18.0

Updates org.apache.commons:commons-compress from 1.21 to 1.26.0

Updates org.apache.hadoop:hadoop-common from 2.7.7 to 3.4.0

Updates org.apache.thrift:libthrift from 0.13.0 to 0.23.0

Release notes

Sourced from org.apache.thrift:libthrift's releases.

Version 0.23.0

Please head over to the official release download source: http://thrift.apache.org/download

The assets listed below are added by Github based on the release tag and they will therefore not match the checkums published on the Thrift project website.

Version 0.22.0

Please head over to the official release download source: http://thrift.apache.org/download

The assets listed below are added by Github based on the release tag and they will therefore not match the checkums published on the Thrift project website.

Version 0.21.0

Please head over to the official release download source: http://thrift.apache.org/download

The assets listed below are added by Github based on the release tag and they will therefore not match the checkums published on the Thrift project website.

Version 0.20.0

Please head over to the official release download source: http://thrift.apache.org/download

The assets listed below are added by Github based on the release tag and they will therefore not match the checkums published on the Thrift project website.

Version 0.19.0

Please head over to the official release download source: http://thrift.apache.org/download

The assets listed below are added by Github based on the release tag and they will therefore not match the checkums published on the Thrift project website.

Version 0.18.1

Please head over to the official release download source: http://thrift.apache.org/download

The assets listed below are added by Github based on the release tag and they will therefore not match the checkums published on the Thrift project website.

Version 0.18.0

Please head over to the official release download source: http://thrift.apache.org/download

The assets listed below are added by Github based on the release tag and they will therefore not match the checkums published on the Thrift project website.

Version 0.17.0

Please head over to the official release download source: http://thrift.apache.org/download

The assets listed below are added by Github based on the release tag and they will therefore not match the checkums published on the Thrift project website.

Version 0.16.0

For release 0.16.0 head over to the official release download source:

... (truncated)

Changelog

Sourced from org.apache.thrift:libthrift's changelog.

0.23.0

Build Process

C glib

  • THRIFT-5931 - thrift_ssl_socket_get_ssl_error() can underflow its remaining-buffer counter and write past the stack buffer
  • THRIFT-5871 - Improve MAX_MESSAGE_SIZE check and friends

C++

  • THRIFT-5911 - Inconsistent UUID compilation for aliased types
  • THRIFT-5912 - Assertion failed: delta > 0, file ThreadManagerTests.h, line 162
  • THRIFT-5880 - C++ TSocket on an IPv6-only system fails if you use a hostname of 127.0.0.1
  • THRIFT-3268 - warning: token pasting of ',' and __VA_ARGS__ is a GNU extension
  • THRIFT-5887 - build/cmake/ should be prepended (not appended) to CMAKE_MODULE_PATH
  • THRIFT-5878 - Add UUID support for THeaderProtocol and TProtocolTap
  • THRIFT-5898 - Unable to build Thrift as a shared library on Windows

Contributed

  • THRIFT-5920 - Remove threadsafe warnings in thrift-maven-plugin

Delphi

  • THRIFT-5939 - Replace GUID generation with stable UUID algorithm
  • THRIFT-5876 - Add Delphi WinHTTP client TLS1.3 support

Go

  • THRIFT-5896 - Race condition in TServerSocket.Addr() method

Java

  • THRIFT-5925 - UUID implementation in JAVA is not according to the Thrift Specification
  • THRIFT-5869 - Close the transport after TServerEventHandler deleteContext
  • THRIFT-5863 - Make TServerTransport able to customize the max message size
  • THRIFT-5774 - Add remote client's IP address to ServerContext in TServerEventHandler
  • THRIFT-4280 - Add async nonblocking ssl support in java client
  • THRIFT-5879 - java and kotlin cross tests fail in the GitHub action

netstd

... (truncated)

Commits
  • e4b684f Updated CHANGES.md
  • c4cbe43 Address vulnerabilities in Rack
  • 68ac8e9 Enable TLS hostname verification in TNonblockingSSLSocket
  • 5e4f01d Harden Node.js WebSocket server handling
  • e242889 Add input validation to Swift protocol layer
  • 4af8c7c Add recursion depth limit to Node.js protocol skip()
  • a30c552 Enable TLS hostname verification in TSSLTransportFactory
  • 0f8ec9c Fix parent class resolution in c_glib generated dispatch_call
  • 276ec88 THRIFT-5929: Fix build failure on PHP 8.5 due to removed zend_exception_get_d...
  • 17f2c13 Added missing 0.23.0 JIRA tickets to CHANGES.md
  • Additional commits viewable in compare view

Updates org.apache.commons:commons-configuration2 from 2.8.0 to 2.15.0

Updates org.apache.shiro:shiro-core from 1.9.1 to 2.2.1

Release notes

Sourced from org.apache.shiro:shiro-core's releases.

Apache Shiro 2.2.1

Bug fixes

Security Improvements

Improvements

New Contributors

Dependency Updates

Full Changelog: apache/shiro@shiro-root-2.2.0...shiro-root-2.2.1

... (truncated)

Changelog

Sourced from org.apache.shiro:shiro-core's changelog.

Licensed to the Apache Software Foundation (ASF) under one

or more contributor license agreements. See the NOTICE file

distributed with this work for additional information

regarding copyright ownership. The ASF licenses this file

to you under the Apache License, Version 2.0 (the

"License"); you may not use this file except in compliance

with the License. You may obtain a copy of the License at

http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing,

software distributed under the License is distributed on an

"AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY

KIND, either express or implied. See the License for the

specific language governing permissions and limitations

under the License.

DEPRECATED

Currently Apache Shiro uses GitHub releases for release notes, so this file is no longer being updated. It will be removed in a future release.

DEPRECATED

This is not an official release notes document. It exists for Shiro developers to jot down their notes while working in the source code. These notes will be combined with Jira’s auto-generated release notes during a release for the total set.

###########################################################

2.0.0

###########################################################

Improvement

[SHIRO-290] Implement bcrypt and argon2 KDF algorithms

Backwards Incompatible Changes

  • Changed default DefaultPasswordService.java algorithm to "Argon2id".
  • PasswordService.encryptPassword(Object plaintext) will now throw a NullPointerException on null parameter. It was never specified how this method would behave.
  • Made salt non-nullable.
  • Removed methods in PasswordMatcher.

###########################################################

1.7.1

###########################################################

Bug

... (truncated)

Commits
  • 9182c1d [maven-release-plugin] prepare release shiro-root-2.2.1
  • 744128d Deprecate RandomSessionIdGenerator due to insufficient entropy (#2770)
  • e384e9d chore(jacoco): added exclusion for weld client proxy (#2769)
  • eed8ab0 chore: update shiro.doap file with more recent versions and maintainers (#2768)
  • 0499524 chore(deps): bump bytebuddy.version from 1.18.8 to 1.18.10 (#2752)
  • bc928d0 Update and expand the CITATION file (#2766)
  • dd5d096 Configure EditorConfig for more file types (#2747)
  • 3b54e71 [CI] Pin to sha all pre-commit hooks and clean up (#2730)
  • 5da6b13 chore(deps): bump com.github.siom79.japicmp:japicmp-maven-plugin (#2751)
  • 169f55a chore(deps): bump org.jboss.shrinkwrap.resolver:shrinkwrap-resolver-bom (#2750)
  • Additional commits viewable in compare view

Updates org.apache.shiro:shiro-web from 1.9.1 to 2.2.1

Release notes

Sourced from org.apache.shiro:shiro-web's releases.

Apache Shiro 2.2.1

Bug fixes

Security Improvements

Improvements

New Contributors

Dependency Updates

Full Changelog: apache/shiro@shiro-root-2.2.0...shiro-root-2.2.1

... (truncated)

Changelog

Sourced from org.apache.shiro:shiro-web's changelog.

Licensed to the Apache Software Foundation (ASF) under one

or more contributor license agreements. See the NOTICE file

distributed with this work for additional information

regarding copyright ownership. The ASF licenses this file

to you under the Apache License, Version 2.0 (the

"License"); you may not use this file except in compliance

with the License. You may obtain a copy of the License at

http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing,

software distributed under the License is distributed on an

"AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY

KIND, either express or implied. See the License for the

specific language governing permissions and limitations

under the License.

DEPRECATED

Currently Apache Shiro uses GitHub releases for release notes, so this file is no longer being updated. It will be removed in a future release.

DEPRECATED

This is not an official release notes document. It exists for Shiro developers to jot down their notes while working in the source code. These notes will be combined with Jira’s auto-generated release notes during a release for the total set.

###########################################################

2.0.0

###########################################################

Improvement

[SHIRO-290] Implement bcrypt and argon2 KDF algorithms

Backwards Incompatible Changes

  • Changed default DefaultPasswordService.java algorithm to "Argon2id".
  • PasswordService.encryptPassword(Object plaintext) will now throw a NullPointerException on null parameter. It was never specified how this method would behave.
  • Made salt non-nullable.
  • Removed methods in PasswordMatcher.

###########################################################

1.7.1

###########################################################

Bug

... (truncated)

Commits
  • 9182c1d [maven-release-plugin] prepare release shiro-root-2.2.1
  • 744128d Deprecate RandomSessionIdGenerator due to insufficient entropy (#2770)
  • e384e9d chore(jacoco): added exclusion for weld client proxy (#2769)
  • eed8ab0 chore: update shiro.doap file with more recent versions and maintainers (#2768)
  • 0499524 chore(deps): bump bytebuddy.version from 1.18.8 to 1.18.10 (#2752)
  • bc928d0 Update and expand the CITATION file (#2766)
  • dd5d096 Configure EditorConfig for more file types (#2747)
  • 3b54e71 [CI] Pin to sha all pre-commit hooks and clean up (#2730)
  • 5da6b13 chore(deps): bump com.github.siom79.japicmp:japicmp-maven-plugin (#2751)
  • 169f55a chore(deps): bump org.jboss.shrinkwrap.resolver:shrinkwrap-resolver-bom (#2750)
  • Additional commits viewable in compare view

Updates commons-io:commons-io from 2.7 to 2.14.0

Updates org.codehaus.jettison:jettison from 1.5.2 to 1.5.4

Release notes

Sourced from org.codehaus.jettison:jettison's releases.

Jettison 1.5.4

What's Changed

Full Changelog: jettison-json/jettison@jettison-1.5.3...jettison-1.5.4

Jettison 1.5.3

Full Changelog: jettison-json/jettison@jettison-1.5.2...jettison-1.5.3

Commits
  • a77ffc4 [maven-release-plugin] prepare release jettison-1.5.4
  • c20a8be Fixing issue 60
  • 3e1a913 [maven-release-plugin] prepare for next development iteration
  • da6d8bc [maven-release-plugin] prepare release jettison-1.5.3
  • 9e3ec6f Remove commented out code
  • b3c4000 Adding another test for backslashes
  • 631c21e Try and fix backslash escaping. Throw syntax exception on invalid json sooner
  • d9da808 Introducing new static methods to set the recursion depth limit
  • 888eec8 Incorrect recursion depth check in JSONTokener
  • 677aba5 [maven-release-plugin] prepare for next development iteration
  • See full diff in compare view

Updates org.apache.commons:commons-lang3 from 3.12.0 to 3.18.0

Updates org.apache.hadoop:hadoop-common from 2.7.7 to 3.4.0

Updates org.apache.thrift:libthrift from 0.13.0 to 0.23.0

Release notes

Sourced from org.apache.thrift:libthrift's releases.

Version 0.23.0

Please head over to the official release download source: http://thrift.apache.org/download

The assets listed below are added by Github based on the release tag and they will therefore not match the checkums published on the Thrift project website.

Version 0.22.0

Please head over to the official release download source: http://thrift.apache.org/download

The assets listed below are added by Github based on the release tag and they will therefore not match the checkums published on the Thrift project website.

Version 0.21.0

Please head over to the official release download source: http://thrift.apache.org/download

The assets listed below are added by Github based on the release tag and they will therefore not match the checkums published on the Thrift project website.

Version 0.20.0

Please head over to the official release download source: http://thrift.apache.org/download

The assets listed below are added by Github based on the release tag and they will therefore not match the checkums published on the Thrift project website.

Version 0.19.0

Please head over to the official release download source: http://thrift.apache.org/download

The assets listed below are added by Github based on the release tag and they will therefore not match the checkums published on the Thrift project website.

Version 0.18.1

Please head over to the official release download source: http://thrift.apache.org/download

The assets listed below are added by Github based on the release tag and they will therefore not match the checkums published on the Thrift project website.

Version 0.18.0

Please head over to the official release download source: http://thrift.apache.org/download

The assets listed below are added by Github based on the release tag and they will therefore not match the checkums published on the Thrift project website.

Version 0.17.0

Please head over to the official release download source: http://thrift.apache.org/download

The assets listed below are added by Github based on the release tag and they will therefore not match the checkums published on the Thrift project website.

Version 0.16.0

For release 0.16.0 head over to the official release download source:

... (truncated)

Changelog

Sourced from org.apache.thrift:libthrift's changelog.

0.23.0

Build Process

C glib

  • THRIFT-5931 - thrift_ssl_socket_get_ssl_error() can underflow its remaining-buffer counter and write past the stack buffer
  • THRIFT-5871 - Improve MAX_MESSAGE_SIZE check and friends

C++

  • THRIFT-5911 - Inconsistent UUID compilation for aliased types
  • THRIFT-5912 - Assertion failed: delta > 0, file ThreadManagerTests.h, line 162
  • THRIFT-5880 - C++ TSocket on an IPv6-only system fails if you use a hostname of 127.0.0.1
  • THRIFT-3268 - warning: token pasting of ',' and __VA_ARGS__ is a GNU extension
  • THRIFT-5887 - build/cmake/ should be prepended (not appended) to CMAKE_MODULE_PATH
  • THRIFT-5878 - Add UUID support for THeaderProtocol and TProtocolTap
  • THRIFT-5898 - Unable to build Thrift as a shared library on Windows

Contributed

  • THRIFT-5920 - Remove threadsafe warnings in thrift-maven-plugin

Delphi

  • THRIFT-5939 - Replace GUID generation with stable UUID algorithm
  • THRIFT-5876 - Add Delphi WinHTTP client TLS1.3 support

Go

  • THRIFT-5896 - Race condition in TServerSocket.Addr() method

Java

  • THRIFT-5925 - UUID implementation in JAVA is not according to the Thrift Specification
  • THRIFT-5869 - Close the transport after TServerEventHandler deleteContext
  • THRIFT-5863 - Make TServerTransport able to customize the max message size
  • THRIFT-5774 - Add remote client's IP address to ServerContext in TServerEventHandler
  • THRIFT-4280 - Add async nonblocking ssl support in java client
  • THRIFT-5879 - java and kotlin cross tests fail in the GitHub action

netstd

... (truncated)

Commits
  • e4b684f Updated CHANGES.md
  • c4cbe43 Address vulnerabilities in Rack
  • 68ac8e9 Enable TLS hostname verification in TNonblockingSSLSocket
  • 5e4f01d Harden Node.js WebSocket server handling
  • e242889 Add input validation to Swift protocol layer
  • 4af8c7c Add recursion depth limit to Node.js protocol skip()
  • a30c552 Enable TLS hostname verification in TSSLTransportFactory
  • 0f8ec9c Fix parent class resolution in c_glib generated dispatch_call
  • 276ec88 THRIFT-5929: Fix build failure on PHP 8.5 due to removed zend_exception_get_d...
  • 17f2c13 Added missing 0.23.0 JIRA tickets to CHANGES.md
  • Additional commits viewable in compare view

Updates org.apache.commons:commons-configuration2 from 2.8.0 to 2.15.0

Updates org.apache.shiro:shiro-core from 1.9.1 to 2.2.1

Release notes

Sourced from org.apache.shiro:shiro-core's releases.

Apache Shiro 2.2.1

Bug fixes

Security Improvements

Improvements

@dependabot
Bump the maven group across 2 directories with 13 updates
b25dfda
Bumps the maven group with 12 updates in the /zeppelin-zengine directory:
| Package | From | To |
| --- | --- | --- |
| org.apache.zeppelin:zeppelin-interpreter | `0.11.0-SNAPSHOT` | `0.12.0` |
| commons-io:commons-io | `2.7` | `2.14.0` |
| [io.micrometer:micrometer-core](https://github.com/micrometer-metrics/micrometer) | `1.6.0` | `1.15.12` |
| org.apache.commons:commons-vfs2 | `2.6.0` | `2.10.0` |
| org.eclipse.jgit:org.eclipse.jgit | `4.5.4.201711221230-r` | `5.13.4.202507202350-r` |
| [org.codehaus.jettison:jettison](https://github.com/jettison-json/jettison) | `1.5.2` | `1.5.4` |
| org.apache.commons:commons-lang3 | `3.12.0` | `3.18.0` |
| org.apache.commons:commons-compress | `1.21` | `1.26.0` |
| org.apache.hadoop:hadoop-common | `2.7.7` | `3.4.0` |
| [org.apache.thrift:libthrift](https://github.com/apache/thrift) | `0.13.0` | `0.23.0` |
| org.apache.commons:commons-configuration2 | `2.8.0` | `2.15.0` |
| [org.apache.shiro:shiro-core](https://github.com/apache/shiro) | `1.9.1` | `2.2.1` |
Bumps the maven group with 7 updates in the /zeppelin-web directory:
| Package | From | To |
| --- | --- | --- |
| commons-io:commons-io | `2.7` | `2.14.0` |
| [org.codehaus.jettison:jettison](https://github.com/jettison-json/jettison) | `1.5.2` | `1.5.4` |
| org.apache.commons:commons-lang3 | `3.12.0` | `3.18.0` |
| org.apache.hadoop:hadoop-common | `2.7.7` | `3.4.0` |
| [org.apache.thrift:libthrift](https://github.com/apache/thrift) | `0.13.0` | `0.23.0` |
| org.apache.commons:commons-configuration2 | `2.8.0` | `2.15.0` |
| [org.apache.shiro:shiro-core](https://github.com/apache/shiro) | `1.9.1` | `2.2.1` |
Updates `org.apache.zeppelin:zeppelin-interpreter` from 0.11.0-SNAPSHOT to 0.12.0
Updates `commons-io:commons-io` from 2.7 to 2.14.0
Updates `io.micrometer:micrometer-core` from 1.6.0 to 1.15.12
- [Release notes](https://github.com/micrometer-metrics/micrometer/releases)
- [Commits](micrometer-metrics/micrometer@v1.6.0...v1.15.12)
Updates `org.apache.commons:commons-vfs2` from 2.6.0 to 2.10.0
Updates `org.eclipse.jgit:org.eclipse.jgit` from 4.5.4.201711221230-r to 5.13.4.202507202350-r
Updates `org.codehaus.jettison:jettison` from 1.5.2 to 1.5.4
- [Release notes](https://github.com/jettison-json/jettison/releases)
- [Commits](jettison-json/jettison@jettison-1.5.2...jettison-1.5.4)
Updates `org.apache.commons:commons-lang3` from 3.12.0 to 3.18.0
Updates `org.apache.commons:commons-compress` from 1.21 to 1.26.0
Updates `org.apache.hadoop:hadoop-common` from 2.7.7 to 3.4.0
Updates `org.apache.thrift:libthrift` from 0.13.0 to 0.23.0
- [Release notes](https://github.com/apache/thrift/releases)
- [Changelog](https://github.com/apache/thrift/blob/master/CHANGES.md)
- [Commits](apache/thrift@v0.13.0...v0.23.0)
Updates `org.apache.commons:commons-configuration2` from 2.8.0 to 2.15.0
Updates `org.apache.shiro:shiro-core` from 1.9.1 to 2.2.1
- [Release notes](https://github.com/apache/shiro/releases)
- [Changelog](https://github.com/apache/shiro/blob/main/RELEASE-NOTES)
- [Commits](apache/shiro@shiro-root-1.9.1...shiro-root-2.2.1)
Updates `org.apache.shiro:shiro-web` from 1.9.1 to 2.2.1
- [Release notes](https://github.com/apache/shiro/releases)
- [Changelog](https://github.com/apache/shiro/blob/main/RELEASE-NOTES)
- [Commits](apache/shiro@shiro-root-1.9.1...shiro-root-2.2.1)
Updates `commons-io:commons-io` from 2.7 to 2.14.0
Updates `org.codehaus.jettison:jettison` from 1.5.2 to 1.5.4
- [Release notes](https://github.com/jettison-json/jettison/releases)
- [Commits](jettison-json/jettison@jettison-1.5.2...jettison-1.5.4)
Updates `org.apache.commons:commons-lang3` from 3.12.0 to 3.18.0
Updates `org.apache.hadoop:hadoop-common` from 2.7.7 to 3.4.0
Updates `org.apache.thrift:libthrift` from 0.13.0 to 0.23.0
- [Release notes](https://github.com/apache/thrift/releases)
- [Changelog](https://github.com/apache/thrift/blob/master/CHANGES.md)
- [Commits](apache/thrift@v0.13.0...v0.23.0)
Updates `org.apache.commons:commons-configuration2` from 2.8.0 to 2.15.0
Updates `org.apache.shiro:shiro-core` from 1.9.1 to 2.2.1
- [Release notes](https://github.com/apache/shiro/releases)
- [Changelog](https://github.com/apache/shiro/blob/main/RELEASE-NOTES)
- [Commits](apache/shiro@shiro-root-1.9.1...shiro-root-2.2.1)
Updates `org.apache.shiro:shiro-web` from 1.9.1 to 2.2.1
- [Release notes](https://github.com/apache/shiro/releases)
- [Changelog](https://github.com/apache/shiro/blob/main/RELEASE-NOTES)
- [Commits](apache/shiro@shiro-root-1.9.1...shiro-root-2.2.1)
---
updated-dependencies:
- dependency-name: org.apache.zeppelin:zeppelin-interpreter
dependency-version: 0.12.0
dependency-type: direct:production
dependency-group: maven
- dependency-name: commons-io:commons-io
dependency-version: 2.14.0
dependency-type: direct:production
dependency-group: maven
- dependency-name: io.micrometer:micrometer-core
dependency-version: 1.15.12
dependency-type: direct:production
dependency-group: maven
- dependency-name: org.apache.commons:commons-vfs2
dependency-version: 2.10.0
dependency-type: direct:production
dependency-group: maven
- dependency-name: org.eclipse.jgit:org.eclipse.jgit
dependency-version: 5.13.4.202507202350-r
dependency-type: direct:production
dependency-group: maven
- dependency-name: org.codehaus.jettison:jettison
dependency-version: 1.5.4
dependency-type: direct:production
dependency-group: maven
- dependency-name: org.apache.commons:commons-lang3
dependency-version: 3.18.0
dependency-type: direct:production
dependency-group: maven
- dependency-name: org.apache.commons:commons-compress
dependency-version: 1.26.0
dependency-type: direct:production
dependency-group: maven
- dependency-name: org.apache.hadoop:hadoop-common
dependency-version: 3.4.0
dependency-type: direct:development
dependency-group: maven
- dependency-name: org.apache.thrift:libthrift
dependency-version: 0.23.0
dependency-type: direct:production
dependency-group: maven
- dependency-name: org.apache.commons:commons-configuration2
dependency-version: 2.15.0
dependency-type: direct:production
dependency-group: maven
- dependency-name: org.apache.shiro:shiro-core
dependency-version: 2.2.1
dependency-type: direct:production
dependency-group: maven
- dependency-name: org.apache.shiro:shiro-web
dependency-version: 2.2.1
dependency-type: direct:production
dependency-group: maven
- dependency-name: commons-io:commons-io
dependency-version: 2.14.0
dependency-type: direct:production
dependency-group: maven
- dependency-name: org.codehaus.jettison:jettison
dependency-version: 1.5.4
dependency-type: direct:production
dependency-group: maven
- dependency-name: org.apache.commons:commons-lang3
dependency-version: 3.18.0
dependency-type: direct:production
dependency-group: maven
- dependency-name: org.apache.hadoop:hadoop-common
dependency-version: 3.4.0
dependency-type: direct:development
dependency-group: maven
- dependency-name: org.apache.thrift:libthrift
dependency-version: 0.23.0
dependency-type: direct:production
dependency-group: maven
- dependency-name: org.apache.commons:commons-configuration2
dependency-version: 2.15.0
dependency-type: direct:production
dependency-group: maven
- dependency-name: org.apache.shiro:shiro-core
dependency-version: 2.2.1
dependency-type: direct:production
dependency-group: maven
- dependency-name: org.apache.shiro:shiro-web
dependency-version: 2.2.1
dependency-type: direct:production
dependency-group: maven
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabotdependabotBot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Aug 27, 2026
@dependabotdependabotBot mentioned this pull request Aug 27, 2026
Closed
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependenciesPull requests that update a dependency filejavaPull requests that update java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants